CVE-2021-25236

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1

Description: A server-side request forgery (SSRF) information disclosure issue could allow an unauthenticated user to locate online agents via a specific sweep. This issue affects Trend Micro products, potentially allowing unauthorized access to sensitive information.

Recommendations: For Trend Micro OfficeScan XG version SP1, update to a version that includes a fix for this issue. For Trend Micro Worry-Free Business Security version 10.0 SP1, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the sweep functionality until a patch is available.