Description (CNA)
A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trend Micro / Trend Micro Apex One | affected 2009 (on premise), SaaS |
| Trend Micro / Trend Micro Worry-Free Business Security | affected 10.0 SP1, Services (SaaS) |
CWE
No CWE identifiers supplied.
References
- https://success.trendmicro.com/solution/000263632
- https://www.zerodayinitiative.com/advisories/ZDI-20-1096/
- https://success.trendmicro.com/solution/000267260
ADP enrichment
No English description supplied.