Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-38625
HistoryJan 23, 2024 - 9:15 p.m.

Server side request forgery (ssrf)

2024-01-2321:15:00
PRIOn knowledge base
www.prio-n.com
7
server side request forgery
post-authenticated
vulnerability
trend micro apex central
low-privileged code
cve-2023-38624

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

This is a similar, but not identical vulnerability as CVE-2023-38624.

CPENameOperatorVersion
apex_centraleq2019

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

Related for PRION:CVE-2023-38625