CVE-2021-25243 in Apex One

Résumé

par MITRE • 05/02/2021

An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain patch level information.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 15/01/2021
• Divulgation: 05/02/2021
• Modérer: accepté
• Entrée: VDB-169291
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 5.3 (NVD)
• EPSS: 0.02153
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-25243
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-25243
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-25243/