CVE-2021-28646

CVE-2021-28646 describes an insecure file-permissions flaw in Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1 that could allow a local attacker to take control of a specific log file on affected installations. Connected sources indicate the root cause is improper log-file permi...

CVE-2021-28645

CVE-2021-28645 affects Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1. The root cause is an incorrect permissions assignment on a resource used by the ApexOne Security Agent, enabling a local attacker who can run low-privileged code to escalate to higher privileges (up to SYST...

CVE-2021-25253

CVE-2021-25253 affects Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1. The issue is caused by improper access control on a resource used by the Apex One service, enabling a local attacker who can run low-privilege code to escalate privileges (often to SYSTEM) on affected insta...

CVE-2021-25250

The CVE-2021-25250 issue affects Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1, with the vulnerable component identified as the ApexOne Security Agent. The root cause is an improper access control that sets incorrect permissions on a sensitive file, enabling a local attacker ...

CVE-2021-25253: Incorrect Permission Assignment for Critical Resource

An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to...

CVE-2021-25250: Incorrect Permission Assignment for Critical Resource

An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute...

PT-2021-3229

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to insecure file permissions,...

CVE-2021-28645: Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2021-28646: Incorrect Permission Assignment for Critical Resource

An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file on affected installations...

PT-2021-3228

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions affected versions not specified Trend Micro Apex One as a Service versions affected versions not specified Trend Micro OfficeScan XG SP1 versions affected versions not specified Description The issue is related to...

Trend Micro Apex One security vulnerabilities

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A security vulnerability exists in Trend Micro OfficeScan and an incorrect privilege assignment vulnerability in Trend Micro Apex One, Apex...

Trend Micro Apex One security vulnerabilities

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A security vulnerability exists in Trend Micro OfficeScan that stems from an improper access control vulnerability in Trend Micro Apex One,...

Trend Micro Apex One security vulnerabilities

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A security vulnerability exists in Trend Micro OfficeScan and an inseture file permission vulnerability in Trend Micro Apex One, Apex One a...

Trend Micro Apex One security vulnerabilities

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A security vulnerability exists in Trend Micro OfficeScan that stems from an improper access control vulnerability in Trend Micro Apex One,...

PT-2021-3234

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified OfficeScan XG SP1 affected versions not specified Description The issue is related to improper access control in a sensitive...

PT-2021-3226

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions affected versions not specified Trend Micro Apex One as a Service versions affected versions not specified OfficeScan XG SP1 versions affected versions not specified Description The issue is related to improper...

Trend Micro OfficeScan XG and Trend Micro Worry-Free Business Security Server-Side Request Forgery Vulnerabilities

Trend Micro OfficeScan XG and Trend Micro Worry-Free Business Security are both products of Trend Micro, Inc.Trend Micro OfficeScan XG is a distributed anti-virus software.Trend Micro Worry-Free Business Security is an enterprise-class information security solution. Worry-Free Business Security i...

Trend Micro Apex One and OfficeScan XG Access Control Error Vulnerabilities

Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...

Trend Micro OfficeScan XG and Trend Micro Apex One Access Control Error Vulnerabilities

Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...

Buffer overflow vulnerability in multiple Trend Micro products (CNVD-2021-28323)

Trend Micro OfficeScan XG is a suite of distributed anti-virus software.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection...