An arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business Security Services could allow a local attacker to create an arbitrary file with higher privileges that could lead to a denial-of-service (DoS) on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
References
| Link | Resource |
|---|---|
| https://success.trendmicro.com/solution/000289183 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
12 Jul 2022, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo |
14 Oct 2021, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 | |
| References | (MISC) https://success.trendmicro.com/solution/000289183 - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:trendmicro:apex_one:2019:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.5 |
06 Oct 2021, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-06 10:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-3848
Mitre link : CVE-2021-3848
CVE.ORG link : CVE-2021-3848
JSON object : View
Products Affected
microsoft
- windows
trendmicro
- worry-free_business_security
- apex_one
CWE