CVE-2020-28573

medium

Description

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server.

References

https://www.zerodayinitiative.com/advisories/ZDI-20-1374/

https://success.trendmicro.com/solution/000281949

https://success.trendmicro.com/solution/000281947

Details

Source: Mitre, NVD

Published: 2020-12-01

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N