CVE-2023-25144

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
Trend Micro, Inc.	Trend Micro Apex One	>= 2019 (14.0), < 14.0.0.11564

References

https://success.trendmicro.com/solution/000292209Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-171/Third Party Advisory, VDB Entry
https://success.trendmicro.com/solution/000292209Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-171/Third Party Advisory, VDB Entry

Timeline

Published: Mar 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-251457.8A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on CVE-2023-251467.8A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete th CVE-2023-251476.7An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypa CVE-2023-251487.8A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing CVE-2023-251498.8TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2.8.0 through 2.9.2. During insta CVE-2023-25158.8Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privilege CVE-2023-251505.7Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tr CVE-2023-251517.5opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of `go.opentelemetry.io/contrib/instrumenta CVE-2023-251528.8Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and dire CVE-2023-251535.5containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the nu CVE-2023-251546.1Misskey is an open source, decentralized social media platform. In versions prior to 13.5.0 the link to the instance to the sender that appe CVE-2023-251556.5Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRAND