CVE-2021-25246

An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business…

published February 4, 2021

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01742 · 77.6th percentile
Published
2021-02-04T19:36Z
EPSS history
Timeline
  • 04 FEB 19:36Z
    An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business…
    cvelistv5