CVE-2021-25234

State: Published
Severity: Not scored
Published: Feb 4, 2021
Updated: Aug 3, 2024
Reserved: Jan 15, 2021

Description

An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific notification configuration file.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Trend Micro Apex OneTrend Micro	2019, SaaSAffected
Trend Micro OfficeScanTrend Micro	XG SP1Affected
Trend Micro Worry-Free Business SecurityTrend Micro	10.0 SP1Affected

References

https://success.trendmicro.com/solution/000284202
https://success.trendmicro.com/solution/000284205
https://success.trendmicro.com/solution/000284206
https://www.zerodayinitiative.com/advisories/ZDI-21-109/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.