medium5.3
CVE-2021-25232
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa…
Impact
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Apex One | Version 2019 |
| Trendmicro | Officescan | Version xg |
References
- NVD record
- CVE.org record
- https://success.trendmicro.com/solution/000284202
- https://success.trendmicro.com/solution/000284205
- https://www.zerodayinitiative.com/advisories/ZDI-21-107/
- https://success.trendmicro.com/solution/000284202
- https://success.trendmicro.com/solution/000284205
- https://www.zerodayinitiative.com/advisories/ZDI-21-107/