CVE-2021-32465

Summary

CVE	CVE-2021-32465
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-08-04 19:15:00 UTC
Updated	2021-08-12 13:19:00 UTC
Description	An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Risk And Classification

Problem Types: CWE-281

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Trendmicro	Apex One	2019	All	All	All
Application	Trendmicro	Officescan	xg	sp1	All	All

References

Reference	Source	Link	Tags
Q&A \| Trend Micro Business Support	MISC	success.trendmicro.com
ZDI-21-911 \| Zero Day Initiative	MISC	www.zerodayinitiative.com
SECURITY BULLETIN: July 28, 2021, Security Bulletin for Trend Micro Apex One and Apex One as a Service	MISC	success.trendmicro.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

375905 Trend Micro Apex One(On-Prem) Multiple Vulnerabilities(000287819)(July 2021)