CVE-2022-40144 - Vulnerability Details - OpenCVE

A vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the product's login authentication by falsifying request parameters on affected installations.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Microsoft	Windows
Trendmicro	Apex One

Configuration 1 [-]

AND

OR	cpe:2.3:a:trendmicro:apex_one:-:::::saas::
	cpe:2.3:a:trendmicro:apex_one:2019:::::::*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://appweb.trendmicro.com/SupportNews/NewsDetail.aspx?id=4553
https://jvn.jp/en/jp/JVN36454862/index.html
https://success.trendmicro.com/solution/000291528
https://www.ipa.go.jp/security/ciadr/vul/20220913-jvn.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: trendmicro

Published: 2022-09-19T00:00:00

Updated: 2024-08-03T12:14:39.823Z

Reserved: 2022-09-06T00:00:00

Link: CVE-2022-40144

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-09-19T18:15:10.163

Modified: 2024-11-21T07:20:58.330

Link: CVE-2022-40144

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:apex_one:-:*:*:*:*:saas:*:*", "matchCriteriaId": "576055B3-C274-430E-98DA-BCC578F8C295", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*", "matchCriteriaId": "AF019D2D-C426-4D2D-A254-442CE777B41E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the product's login authentication by falsifying request parameters on affected installations."}, {"lang": "es", "value": "Una vulnerabilidad en Trend Micro Apex One y Trend Micro Apex One as a Service podr\u00eda permitir a un atacante omitir la autenticaci\u00f3n de inicio de sesi\u00f3n del producto al falsificar los par\u00e1metros de petici\u00f3n en las instalaciones afectadas"}], "id": "CVE-2022-40144", "lastModified": "2024-11-21T07:20:58.330", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-09-19T18:15:10.163", "references": [{"source": "security@trendmicro.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://appweb.trendmicro.com/SupportNews/NewsDetail.aspx?id=4553"}, {"source": "security@trendmicro.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://jvn.jp/en/jp/JVN36454862/index.html"}, {"source": "security@trendmicro.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://success.trendmicro.com/solution/000291528"}, {"source": "security@trendmicro.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://www.ipa.go.jp/security/ciadr/vul/20220913-jvn.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://appweb.trendmicro.com/SupportNews/NewsDetail.aspx?id=4553"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://jvn.jp/en/jp/JVN36454862/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://success.trendmicro.com/solution/000291528"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://www.ipa.go.jp/security/ciadr/vul/20220913-jvn.html"}], "sourceIdentifier": "security@trendmicro.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}