CVE-2023-25148 (apex_one)

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

agent apex apex one changing code cve escalation exploit file link local low micro order privilege privileged privilege escalation security system target trend trend micro vulnerability