Detections
Analytics
CVE-2021-25246
medium
Description
An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.
References
https://www.zerodayinitiative.com/advisories/ZDI-21-117/
https://success.trendmicro.com/solution/000284206