CVE-2021-32465

🗓️ 04 Aug 2021 18:29:37Reported by trendmicroType

Incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 allows remote user to bypass authentication. Attacker needs ability to execute low-privileged code

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the Apex One and OfficeScan antivirus software lies in errors during the saving of permissions, allowing a hacker to bypass the security measures.	25 Aug 202100:00	–	bdu_fstec
Circl	CVE-2021-32465	4 Aug 202123:23	–	circl
CNNVD	Trend Micro Apex One 安全漏洞	28 Jul 202100:00	–	cnnvd
CVE	CVE-2021-32465	4 Aug 202118:29	–	cve
EUVD	EUVD-2021-19319	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises	4 Aug 202102:15	–	jvn
NCSC	Vulnerabilities fixed in Trend Micro Apex One	13 Aug 202100:00	–	ncsc
NVD	CVE-2021-32465	4 Aug 202119:15	–	nvd
OSV	CVE-2021-32465	4 Aug 202119:15	–	osv
Prion	Authentication flaw	4 Aug 202119:15	–	prion

[
  {
    "product": "Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019, SaaS"
      }
    ]
  },
  {
    "product": "Trend Micro OfficeScan",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "XG SP1"
      }
    ]
  }
]

Source	Link
success	www.success.trendmicro.com/solution/000287819
success	www.success.trendmicro.com/jp/solution/000287796
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-911/

04 Aug 2021 18:29Current

9.1High risk

Vulners AI Score9.1

EPSS0.04341