CVE-2021-25238: Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability
First published: Thu Feb 04 2021(Updated: )
An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Officescan | =xg-sp1 | |
| Trendmicro Worry-free Business Security | =10.0-sp1 | |
| Microsoft Windows | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Trend Micro OfficeScan vulnerability?
The vulnerability ID for this Trend Micro OfficeScan vulnerability is CVE-2021-25238.
What is the title of this vulnerability?
The title of this vulnerability is Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability.
How does this vulnerability allow attackers to disclose sensitive information?
Attackers can disclose sensitive information by exploiting this vulnerability without authentication through the web console on TCP port 4343.
Is authentication required to exploit this vulnerability?
No, authentication is not required to exploit this vulnerability.
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium, with a severity value of 5.3.
- collector/nvd-index
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/title
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-121
- alias/ZDI-CAN-11607
- alias/CVE-2021-25238
- agent/software-canonical-lookup
- agent/event
- agent/tags
- agent/trending
- vendor/trendmicro
- canonical/trendmicro officescan
- version/trendmicro officescan/xg-sp1
- canonical/trendmicro worry-free business security
- version/trendmicro worry-free business security/10.0-sp1
- vendor/microsoft
- canonical/microsoft windows
- vendor/trend micro
- canonical/trend micro officescan