PT-2020-6074
CVE-2020-28582
·
Published
2020-11-17
·
Updated
2021-07-21
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Trend Micro Apex One (affected versions not specified)
Trend Micro OfficeScan XG SP1 (affected versions not specified)
Description
The issue is related to an improper access control information disclosure, which could allow an unauthenticated user to connect to the product server and reveal the number of managed agents. This could potentially be exploited by a remote attacker.
Recommendations
For Trend Micro Apex One, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Trend Micro OfficeScan XG SP1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾