Description (CNA)
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trend Micro / Trend Micro Apex One | affected 2019 |
| Trend Micro / Trend Micro OfficeScan | affected XG SP1 |
CWE
No CWE identifiers supplied.
References
- https://success.trendmicro.com/solution/000281949
- https://success.trendmicro.com/solution/000281947
- https://www.zerodayinitiative.com/advisories/ZDI-20-1374/
ADP enrichment
No English description supplied.