ZDI-20-1243: Trend Micro Antivirus for Mac Improper Access Control Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the iCoreService endpoint, which listens on local TCP port 37848 by default. The issue results from improper access control. An attacker can leverage this vulnerability to disclose information in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-20-1243?
ZDI-20-1243 is classified as a medium severity vulnerability due to its ability to disclose sensitive information.
How do I fix ZDI-20-1243?
To fix ZDI-20-1243, update Trend Micro Antivirus for Mac to the latest version provided by the vendor.
What kind of information can be disclosed by exploiting ZDI-20-1243?
Exploiting ZDI-20-1243 may allow an attacker to gain access to sensitive information stored on the affected system.
Who is affected by ZDI-20-1243?
Any user of Trend Micro Antivirus for Mac may be affected by ZDI-20-1243 if the software is installed on their system.
What is required to exploit ZDI-20-1243?
An attacker must have the ability to execute low-privileged code on the target Mac system to exploit ZDI-20-1243.