CVE-2023-25069
High
Description
TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, falsely authenticated user to escalate his privileges to administrator level. With these privileges, an attacker could perform actions they are not authorized to. Please note: an attacker must first obtain a low-privileged authenticated user's profile on the target system in order to exploit this vulnerability.
SeverityHigh
CVSS8.8
Exploit probability—
ProductTrendmicro Txone Stellarone
PublishedMar 22, 2023
First seenMar 22, 2023
How to fix
Update
- trendmicro txone_stellarone2.0.1160 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro txone_stellarone | v < 2.0.1160 | 2.0.1160 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.