Trend Micro TXOne StellarOne Improper Access Control Privilege Escalation Vulnerability
2023-03-17
| CVE ID | CVE-2023-25069 |
|---|---|
| Severity | High |
| Affected Vendors | TXOne Networks |
| Affected Products | Stellar before V2.0.1160 |
| Vulnerability Details | This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro TXOne StellarOne. Authentication is required to exploit this vulnerability.The specific flaw exists within the Account endpoint. The issue results from the lack of proper access control. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. |
| Solutions & Rules | · Fixed in version V2.1.1127 |
| Credit | Elias Martinez of MD Anderson Cancer Center |