SB2021033121 - Multiple vulnerabilities in Trend Micro Apex One and OfficeScan

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Improper access control (CVE-ID: CVE-2021-25250)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and escalate privileges on the system.

2) Improper access control (CVE-ID: CVE-2021-25253)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and escalate privileges on the system.

3) Insecure Inherited Permissions (CVE-ID: CVE-2021-28645)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect permissions assignment. A local user can escalate privileges on the system.

4) Incorrect default permissions (CVE-ID: CVE-2021-28646)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions for files and folders that are set by the application. A local user with access to the system can view contents of files and directories or modify them.

Remediation

Install update from vendor's website.

References

• https://success.trendmicro.com/solution/000286019
• https://success.trendmicro.com/solution/000286157
• https://www.zerodayinitiative.com/advisories/ZDI-21-400/
• https://www.zerodayinitiative.com/advisories/ZDI-21-401/
• https://www.zerodayinitiative.com/advisories/ZDI-21-402/