Vulnerability Details CVE-2021-25230
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the contents of a scan connection exception file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.6%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- https://success.trendmicro.com/solution/000284202
- https://success.trendmicro.com/solution/000284205
- https://www.zerodayinitiative.com/advisories/ZDI-21-105/
- https://success.trendmicro.com/solution/000284202
- https://success.trendmicro.com/solution/000284205
- https://www.zerodayinitiative.com/advisories/ZDI-21-105/
Products affected by CVE-2021-25230
-
cpe:2.3:a:trendmicro:apex_one:2019
-
cpe:2.3:a:trendmicro:officescan:xg
-
cpe:2.3:o:microsoft:windows:-