ZDI-CAN-19871: ZDI-23-999: Trend Micro Apex Central modDeepSecurity Server-Side Request Forgery Information Disclosure Vulnerability
Published Jul 26, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability.
Affected Software
1 affected component
Trend Micro Apex Central
Event History
Jul 26, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Jan 23, 2024
Advisory Published
via ZDI·08:39 PM
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19871?
The severity of ZDI-CAN-19871 is categorized as medium due to the potential for sensitive information disclosure.
2
How do I fix ZDI-CAN-19871?
To fix ZDI-CAN-19871, update your version of Trend Micro Apex Central to the latest patched release.
3
Who is affected by ZDI-CAN-19871?
ZDI-CAN-19871 affects installations of Trend Micro Apex Central that are not updated with the latest security patches.
4
Is authentication required to exploit ZDI-CAN-19871?
Yes, authentication is required to exploit ZDI-CAN-19871.
5
What type of information can be disclosed by ZDI-CAN-19871?
ZDI-CAN-19871 allows remote attackers to disclose sensitive information from vulnerable installations of Trend Micro Apex Central.