Security Advisory

CVE-2021-25246

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-02-04 19:36:50
Last updated 2024-08-03 19:56:11
Assigner trendmicro
State PUBLISHED

Description

An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.