CVE-2020-28577: Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability
First published: Tue Dec 01 2020(Updated: )
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Apex One | =2019 | |
| Trendmicro Officescan | =xg-sp1 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-28577?
CVE-2020-28577 is an improper access control information disclosure vulnerability in Trend Micro Apex One.
How does CVE-2020-28577 impact affected installations of Trend Micro Apex One?
CVE-2020-28577 allows remote attackers to disclose sensitive information without authentication on affected installations of Trend Micro Apex One.
What software is affected by CVE-2020-28577?
CVE-2020-28577 affects Trend Micro Apex One 2019 and Trend Micro Apex One and Worry-Free Business Security, as well as Trendmicro Officescan xg-sp1.
What is the severity of CVE-2020-28577?
CVE-2020-28577 has a severity rating of medium with a CVSS score of 5.3.
How can I fix the CVE-2020-28577 vulnerability?
To fix the CVE-2020-28577 vulnerability, it is recommended to apply the patches and updates provided by Trend Micro.
- agent/type
- agent/references
- agent/author
- agent/severity
- agent/title
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-20-1376
- alias/ZDI-CAN-11571
- alias/CVE-2020-28577
- agent/software-canonical-lookup
- agent/tags
- agent/event
- agent/trending
- vendor/trendmicro
- canonical/trendmicro apex one
- version/trendmicro apex one/2019
- canonical/trendmicro officescan
- version/trendmicro officescan/xg-sp1
- vendor/trend micro
- canonical/trend micro apex one