ZDI-23-1000: Trend Micro Apex Central modVulnerabilityProtect Server-Side Request Forgery Information Disclosure Vulnerability
Published Jul 26, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability.
Affected Software
1 affected component
Trend Micro Apex Central
Event History
Jul 26, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Jan 23, 2024
Advisory Published
via ZDI·08:39 PM
Frequently Asked Questions
1
What is the severity of ZDI-23-1000?
The severity of ZDI-23-1000 is classified as high due to its potential to disclose sensitive information.
2
How do I fix ZDI-23-1000?
To fix ZDI-23-1000, ensure that you apply the latest patches provided by Trend Micro for Apex Central.
3
Who is affected by ZDI-23-1000?
ZDI-23-1000 affects installations of Trend Micro Apex Central that are accessible over the network.
4
What type of vulnerability is ZDI-23-1000?
ZDI-23-1000 is a remote information disclosure vulnerability requiring authentication to exploit.
5
Can ZDI-23-1000 be exploited remotely?
Yes, ZDI-23-1000 can be exploited remotely by authenticated attackers.