CVE-2021-25241

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One version 10.0 SP1 Worry-Free Business Security version 10.0 SP1

Description: A server-side request forgery (SSRF) information disclosure issue could allow an unauthenticated user to locate online agents via a sweep. This issue affects Trend Micro products, potentially allowing unauthorized access to sensitive information.

Recommendations: For Trend Micro Apex One version 10.0 SP1, update to a version that includes a fix for this issue. For Worry-Free Business Security version 10.0 SP1, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the sweep functionality until a patch is available.