CVE-2020-28577
N/A
N/A
Summary
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Trend Micro | Trend Micro Apex One | 2019 | affected |
| Trend Micro | Trend Micro OfficeScan | XG SP1 | affected |
Weaknesses
- Improper Access Control Information Disclosure
ADP Enrichment
CVE Program Container
Additional References
- https://success.trendmicro.com/solution/000281949
- https://success.trendmicro.com/solution/000281947
- https://www.zerodayinitiative.com/advisories/ZDI-20-1376/
References
- https://success.trendmicro.com/solution/000281949
- https://success.trendmicro.com/solution/000281947
- https://www.zerodayinitiative.com/advisories/ZDI-20-1376/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.