medium5.3
CVE-2020-28583
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to…
Impact
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Apex One | Version 2019 |
| Trendmicro | Officescan | Version xg |
References
- NVD record
- CVE.org record
- https://success.trendmicro.com/solution/000281947
- https://success.trendmicro.com/solution/000281949
- https://www.zerodayinitiative.com/advisories/ZDI-20-1387/
- https://success.trendmicro.com/solution/000281947
- https://success.trendmicro.com/solution/000281949
- https://www.zerodayinitiative.com/advisories/ZDI-20-1387/