CVE-2024-52050

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-52050

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

A

LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

References
Link Resource
https://success.trendmicro.com/en-US/solution/KA-0018217 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*
History

25 Aug 2025, 18:27

Type Values Removed Values Added
First Time Trendmicro
Trendmicro apex One
References () https://success.trendmicro.com/en-US/solution/KA-0018217 - () https://success.trendmicro.com/en-US/solution/KA-0018217 - Vendor Advisory
Summary
  • (es) Una vulnerabilidad de creación de archivos arbitrarios en LogServer en Trend Micro Apex One podría permitir que un atacante local aumente los privilegios en las instalaciones afectadas. Tenga en cuenta que un atacante primero debe obtener la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder explotar esta vulnerabilidad.
CPE cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*

31 Dec 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-31 16:15

Updated : 2025-08-25 18:27

NVD link : CVE-2024-52050

Mitre link : CVE-2024-52050

CVE.ORG link : CVE-2024-52050

JSON object : View

Products Affected

trendmicro

CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')