Security Vulnerabilities fixed in Trend Micro Apex One 14.0.0.11136

Description

An arbitrary file deletion and a link following vulnerabilities in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges by creating a symbolic link and abusing the service to delete a file and delete files on affected installations.

Affected Applications

Trend Micro Apex One

CVE References

CVE-2022-45797 CVE-2022-45798

Other References

https://success.trendmicro.com/dcx/s/solution/000291830