Vulnerability CVE-2022-40143


Published: 2022-09-19

Description:
A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow a local attacker to abuse an insecure directory that could allow a low-privileged user to run arbitrary code with elevated privileges.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

 References:
https://success.trendmicro.com/solution/000291528
https://www.zerodayinitiative.com/advisories/ZDI-22-1191/

Copyright 2026, cxsecurity.com

 

Back to Top