CVE-2024-36307: 
Trend Micro Apex One Agent vulnerability analysis and mitigation

A security vulnerability (CVE-2024-36307) was identified in Trend Micro Apex One and Apex One as a Service. The vulnerability relates to a security agent link following issue that could potentially lead to sensitive information disclosure. The vulnerability was reported to the vendor on December 1, 2023, and was publicly disclosed on June 6, 2024 (ZDI Advisory).

The vulnerability exists within the VsApiNT module of the Trend Micro Apex One Security Agent. The flaw has been assigned a CVSS score of 4.7 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N), indicating a moderate severity level. The specific issue involves the ability to abuse the agent through the creation of a mount point, which can lead to file content disclosure (ZDI Advisory).

When successfully exploited, this vulnerability allows an attacker to disclose information in the context of SYSTEM. The attacker can potentially access and reveal the contents of sensitive files on affected installations of Trend Micro Apex One Security Agent (ZDI Advisory).

The vulnerability requires local access and low-privileged code execution capabilities on the target system for successful exploitation. An attacker must first obtain the ability to execute low-privileged code on the target system before they can exploit this vulnerability (ZDI Advisory).

Trend Micro has released an update to address this vulnerability. Users are advised to apply the security update to protect their systems (ZDI Advisory).