CVE-2021-25244: Trend Micro Worry-Free Business Security Improper Access Control Information Disclosure Vulnerability
An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of configuration informaiton.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Worry-Free Business Security. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue results from improper access control. An attacker can leverage this vulnerability to disclose information from the application.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-25244?
CVE-2021-25244 is a vulnerability in Trend Micro Worry-Free Business Security that allows remote attackers to disclose sensitive information without authentication.
How does CVE-2021-25244 impact Trend Micro Worry-Free Business Security?
CVE-2021-25244 allows remote attackers to access sensitive information on installations of Trend Micro Worry-Free Business Security.
What is the severity of CVE-2021-25244?
CVE-2021-25244 has a severity rating of 5.3 (Medium).
How can I fix CVE-2021-25244?
To fix CVE-2021-25244, update Trend Micro Worry-Free Business Security to the latest version available.
Where can I find more information about CVE-2021-25244?
You can find more information about CVE-2021-25244 at the following references: [link 1](https://success.trendmicro.com/solution/000284206), [link 2](https://www.zerodayinitiative.com/advisories/ZDI-21-123/).