CVE-2020-25774Out-of-bounds Read in Micro Apex ONE

CWE-125Out-of-bounds Read3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 47.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 29
Latest updateMay 24

Description

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

NVDtrendmicro/apex_one2019, saas+1
CVEListV5trend_micro/trend_micro_apex_one2009, SaaS

🔴Vulnerability Details

2
GHSA
GHSA-fr6q-7f5x-r9m2: A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosu2022-05-24
CVEList
CVE-2020-25774: A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosu2020-09-28
CVE-2020-25774 — Out-of-bounds Read in Trend | cvebase