What is the severity of ZDI-24-573?

The severity of ZDI-24-573 is classified as medium risk due to its potential for local attackers to expose sensitive information.

How can I mitigate the risk of ZDI-24-573?

Mitigation for ZDI-24-573 involves ensuring that only authorized users can execute code on affected systems and applying necessary updates to Trend Micro Apex One.

Are all versions of Trend Micro Apex One affected by ZDI-24-573?

Yes, all supported versions of Trend Micro Apex One are susceptible to ZDI-24-573 if proper security measures are not implemented.

Who can exploit ZDI-24-573?

ZDI-24-573 can be exploited by local attackers who have the ability to execute low-privileged code on the target system.

What information could be disclosed due to ZDI-24-573?

ZDI-24-573 could potentially allow attackers to disclose sensitive information stored within the Trend Micro Apex One Security Agent.

Vulnerability/
ZDI-24-573

medium

4.7

6/6/2024

10/6/2024

ZDI-24-573: Trend Micro Apex One Security Agent Link Following Information Disclosure Vulnerability

First published: Thu Jun 06 2024(Updated: )

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the VsApiNT module. By creating a mount point, an attacker can abuse the agent to disclose the contents of a file. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM.

Affected Software	Affected Version	How to fix
Trend Micro Apex One

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of ZDI-24-573?
The severity of ZDI-24-573 is classified as medium risk due to its potential for local attackers to expose sensitive information.
How can I mitigate the risk of ZDI-24-573?
Mitigation for ZDI-24-573 involves ensuring that only authorized users can execute code on affected systems and applying necessary updates to Trend Micro Apex One.
Are all versions of Trend Micro Apex One affected by ZDI-24-573?
Yes, all supported versions of Trend Micro Apex One are susceptible to ZDI-24-573 if proper security measures are not implemented.
Who can exploit ZDI-24-573?
ZDI-24-573 can be exploited by local attackers who have the ability to execute low-privileged code on the target system.
What information could be disclosed due to ZDI-24-573?
ZDI-24-573 could potentially allow attackers to disclose sensitive information stored within the Trend Micro Apex One Security Agent.

collector/zdi-published
source/ZDI
alias/ZDI-CAN-22032
agent/title
agent/last-modified-date
agent/first-publish-date
agent/type
collector/zdi-advisory
alias/ZDI-24-573
alias/CVE-2024-36307
agent/software-canonical-lookup
agent/severity
agent/softwarecombine
agent/references
agent/description
agent/event
agent/trending
agent/tags
agent/source
vendor/trend micro
canonical/trend micro apex one

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.