CVE-2020-24559

A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:apex_one:saas:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*
cpe:2.3:a:trendmicro:worry-free_business_security_services:-:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

16 Sep 2021, 13:43

Type Values Removed Values Added
CPE cpe:2.3:a:trendmicro:worry-free_business_security_services:-:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*
References (MISC) https://success.trendmicro.com/solution/000263632 - Product (MISC) https://success.trendmicro.com/solution/000263632 - Vendor Advisory
References (MISC) https://success.trendmicro.com/solution/000267260 - (MISC) https://success.trendmicro.com/solution/000267260 - Vendor Advisory

08 Sep 2021, 17:22

Type Values Removed Values Added
CPE cpe:2.3:o:apple:mac_os:-:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
CWE CWE-269 CWE-59

22 Apr 2021, 22:15

Type Values Removed Values Added
References
  • (MISC) https://success.trendmicro.com/solution/000267260 -
Summary A vulnerability in Trend Micro Apex One on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Information

Published : 2020-09-01 19:15

Updated : 2023-12-10 13:27


NVD link : CVE-2020-24559

Mitre link : CVE-2020-24559

CVE.ORG link : CVE-2020-24559


JSON object : View

Products Affected

trendmicro

  • worry-free_business_security
  • apex_one
  • worry-free_business_security_services
  • officescan

apple

  • macos

microsoft

  • windows
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')