Vulnerability Details CVE-2021-25238
An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.7%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- https://success.trendmicro.com/solution/000284205
- https://success.trendmicro.com/solution/000284206
- https://www.zerodayinitiative.com/advisories/ZDI-21-121/
- https://success.trendmicro.com/solution/000284205
- https://success.trendmicro.com/solution/000284206
- https://www.zerodayinitiative.com/advisories/ZDI-21-121/
Products affected by CVE-2021-25238
-
cpe:2.3:a:trendmicro:officescan:xg
-
cpe:2.3:a:trendmicro:worry-free_business_security:10.0
-
cpe:2.3:o:microsoft:windows:-