CVE-2021-32465

🗓️ 04 Aug 2021 18:29:37Reported by trendmicroType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 66 Views

Incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-32465	4 Aug 202123:23	–	circl
CNNVD	Trend Micro Apex One 安全漏洞	28 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-32465	4 Aug 202118:29	–	cvelist
EUVD	EUVD-2021-19319	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises	4 Aug 202102:15	–	jvn
NCSC	Vulnerabilities fixed in Trend Micro Apex One	13 Aug 202100:00	–	ncsc
NVD	CVE-2021-32465	4 Aug 202119:15	–	nvd
Prion	Authentication flaw	4 Aug 202119:15	–	prion
RedhatCVE	CVE-2021-32465	22 May 202521:19	–	redhatcve
Tenable Nessus	Trend Micro Apex One Multiple Vulnerabilities (000287819)	8 Nov 202100:00	–	nessus

NVD

Node

trendmicro apex_oneMatch2019

trendmicro officescanMatchxgsp1

[
  {
    "product": "Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019, SaaS"
      }
    ]
  },
  {
    "product": "Trend Micro OfficeScan",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "XG SP1"
      }
    ]
  }
]

Source	Link
success	www.success.trendmicro.com/solution/000287819
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-911/
success	www.success.trendmicro.com/jp/solution/000287796

21 Nov 2024 06:07Current

8.9High risk

Vulners AI Score8.9

CVSS 26.5

CVSS 3.18.8

EPSS0.0344

CWE-281

trend micro apex one apex one as a service officescan xg sp1 vulnerability authentication bypass remote attack cve-2021-32465 nvd