Description
An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Trend Micro, Inc. | Trend Micro Deep Security Agent | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Fri, 20 Jun 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-269 | |
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: trendmicro
Published:
Updated: 2025-06-20T19:00:09.613Z
Reserved: 2024-01-12T00:09:12.342Z
Link: CVE-2023-52337
Vulnrichment
Updated: 2024-08-02T22:55:41.567Z
NVD
Status : Modified
Published: 2024-01-23T21:15:09.677
Modified: 2025-06-20T19:15:28.310
Link: CVE-2023-52337
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses