Back to CVE Browser

CVE-2021-32465

HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2021-08-04

Last Modified2024-11-21

Data SourcesNVD

Vulnerability Description

An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected Platforms (CPE)

📦

Trendmicro

Apex One

= 2019

📦

Trendmicro

Officescan

= xg

References & Advisories

🔗 https://success.trendmicro.com/jp/solution/000287796

🔗 https://success.trendmicro.com/solution/000287819

🔗 https://www.zerodayinitiative.com/advisories/ZDI-21-911/

🔗 https://success.trendmicro.com/jp/solution/000287796

🔗 https://success.trendmicro.com/solution/000287819

🔗 https://www.zerodayinitiative.com/advisories/ZDI-21-911/

Related Vulnerabilities

CVE-2026-1632610.0

In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one cli...

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() rac...

CVE-2026-136977.4

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up...

CVE-2026-592439.8

The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to ...

CVE-2021-32465 Detail & Impact Analysis | CVSS 8.8 (HIGH) | Cyber-Sec.Space | Cyber-Sec.Space