CVE-2024-36307

CVSS v3 4.7 (Medium)

EPSS 0.05 % (17^th)

A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Weaknesses

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CNA: Trend Micro, Inc.
security@trendmicro.com
Published Date: 2024-06-10 22:15:11
(6 weeks ago)
Updated Date: 2024-07-03 02:03:05
(3 weeks ago)