CVE-2020-24563

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option if configured, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged co...

Information disclosure

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account. User interaction is required to exploit this vulnerability in that the...

Information disclosure

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

Information disclosure

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

Design/Logic Flaw

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option if configured, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged co...

Information disclosure

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

Information disclosure

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

Information disclosure

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

Design/Logic Flaw

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interaction is required to exploit this vulnerability in that the target must import a corrupted configuration file...

CVE-2020-25774

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account. User interaction is required to exploit this vulnerability in that the...

CVE-2020-25774

CVE-2020-25774 affects Trend Micro Apex One ServerMigrationTool. A vulnerability in ZIP file parsing leads to an out-of-bounds read, causing information disclosure to an unprivileged user. The issue stems from inadequate validation of user-supplied data. Impact: sensitive information could be dis...

CVE-2020-25773

CVE-2020-25773 affects Trend Micro Apex One ServerMigrationTool. The vulnerability lies in DAT/file parsing within the ServerMigrationTool component, where a failure to verify the existence of an object before performing release operations can lead to remote code execution. Exploitation requires ...

CVE-2020-25772

CVE-2020-25772 corresponds to an information-disclosure flaw in Trend Micro Apex One characterized as an out-of-bounds read. The Red Hat-linked entries (CVE-2020-24564/24565/25770/25771) describe a local, low-privilege-execution scenario enabling an unprivileged user to disclose sensitive data on...

CVE-2020-25772

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2020-25770

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2020-25771

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2020-25770

The CVE-2020-25770 entry concerns an out-of-bounds read information disclosure in Trend Micro Apex One. It can allow a local attacker to disclose sensitive information after obtaining the ability to execute low-privileged code on the target system. The description specifies the vulnerability affe...

CVE-2020-25771

Trend Micro Apex One contains local, out-of-bounds read information-disclosure vulnerabilities tracked as CVE-2020-25771. Exploitation requires attacker to first obtain the ability to execute low-privileged code on the target and then trigger the vulnerability to disclose sensitive information to...

CVE-2020-24563

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option if configured, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged co...

CVE-2020-24563

CVE-2020-24563 affects Trend Micro Apex One; a local attacker who can run low-privileged code can exploit the ApexOne Security Agent unload process to gain privilege escalation and execute code. The linked ZDI advisory attributes the flaw to an authentication bypass in the ApexOne Security Agent,...