ZDI-23-231: Trend Micro TXOne StellarOne Improper Access Control Privilege Escalation Vulnerability
Published Mar 17, 2023
·Updated
This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro TXOne StellarOne. Authentication is required to exploit this vulnerability.
Affected Software
1 affected component
Trend Micro TXOne StellarOne
Event History
Mar 17, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Aug 2, 2024
Advisory Published
via ZDI·11:19 AM
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID is ZDI-23-231.
2
What is the severity of the ZDI-23-231 vulnerability?
The severity of the ZDI-23-231 vulnerability is high with a CVSS score of 8.3.
3
Which software is affected by the ZDI-23-231 vulnerability?
The ZDI-23-231 vulnerability affects Trend Micro TXOne StellarOne.
4
What is the impact of the ZDI-23-231 vulnerability?
The ZDI-23-231 vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro TXOne StellarOne.
5
How can the ZDI-23-231 vulnerability be exploited?
To exploit the ZDI-23-231 vulnerability, authentication is required and attackers can exploit the improper access control in the Account endpoint of Trend Micro TXOne StellarOne.