Vulnerability CVE-2023-25146


Published: 2023-03-10

Description:
A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder and replace with a junction to an arbitrary location, ultimately leading to an arbitrary file dropped to an arbitrary location. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

 References:
https://www.zerodayinitiative.com/advisories/ZDI-23-172/
https://success.trendmicro.com/solution/000292209

Copyright 2026, cxsecurity.com

 

Back to Top