ZDI-CAN-17965: ZDI-23-653: Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability
Published May 17, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
Trend Micro Apex One
Event History
May 17, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Feb 24, 2025
Advisory Published
via ZDI·09:38 AM
Frequently Asked Questions
1
What is ZDI-CAN-17965?
ZDI-CAN-17965 is a vulnerability in Trend Micro Apex One that allows remote attackers to disclose sensitive information without authentication.
2
How severe is ZDI-CAN-17965?
ZDI-CAN-17965 has a severity rating of 6.5 out of 10, which is considered medium severity.
3
How does ZDI-CAN-17965 work?
ZDI-CAN-17965 is caused by improper access control within the web console of Trend Micro Apex One, allowing attackers to access sensitive information.
4
Is authentication required to exploit ZDI-CAN-17965?
No, authentication is not required to exploit ZDI-CAN-17965.
5
How can I fix ZDI-CAN-17965?
To fix ZDI-CAN-17965, it is recommended to apply the necessary security patches provided by Trend Micro.