Description
An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trend Micro | Trend Micro Apex One | 2019, SaaS | — |
| Trend Micro | Trend Micro OfficeScan | XG SP1 | — |
| Trend Micro | Trend Micro Worry-Free Business Security | 10.0 SP1 | — |