CVE-2022-41748

2022-10-1000:00:00

trendmicro

www.cve.org

cve-2022-41748

apex one

data loss prevention

anti-tampering mechanisms

administrative credentials

local attacker

AI Score

6.6

Confidence

High

EPSS

Percentile

5.1%

JSON

A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with administrative credentials to bypass certain elements of the product’s anti-tampering mechanisms on affected installations. Please note: an attacker must first obtain administrative credentials on the target system in order to exploit this vulnerability.

CNA Affected

[
  {
    "vendor": "Trend Micro",
    "product": "Trend Micro Apex One",
    "versions": [
      {
        "version": "2019 (on-prem) and SaaS",
        "status": "affected"
      }
    ]
  }
]

References

success.trendmicro.com/solution/000291645