Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25246

An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an u

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trendmicro

Description

An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trend Micro Trend Micro Apex One

  • 2019, SaaSaffected

Trend Micro Trend Micro OfficeScan

  • XG SP1affected

Trend Micro Trend Micro Worry-Free Business Security

  • 10.0 SP1affected

References