CVE-2024-58104 — Trend Micro, Inc. / Trend Micro Apex One

CVE-2024-58104

Trend Micro, Inc. / Trend Micro Apex One PUBLISHED

Description (CNA)

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected (CNA)

Vendor / product	Versions
Trend Micro, Inc. / Trend Micro Apex One	affected 2019 (14.0) before 14.0.0.13122
Trend Micro, Inc. / Trend Micro Apex One as a Service	affected SaaS before 14.0.13260

CWE

No CWE identifiers supplied.

References

https://success.trendmicro.com/en-US/solution/KA-0018217

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.