CVE-2021-25234

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1

Description: The issue is related to improper access control, which could allow an unauthenticated user to obtain information about a specific notification configuration file.

Recommendations: For Trend Micro Apex One (on-prem and SaaS), consider restricting access to the notification configuration file until a patch is available. For OfficeScan XG SP1, restrict access to the vulnerable component to minimize the risk of exploitation. For Worry-Free Business Security 10.0 SP1, avoid using the vulnerable configuration file in the affected setup until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.