CVE-2020-28582

2020-12-0118:40:39

trendmicro

www.cve.org

trend micro

apex one

officescan xg sp1

vulnerability

information disclosure

unauthenticated user

product server

managed agents

AI Score

5.2

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents.

CNA Affected

[
  {
    "product": "Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019"
      }
    ]
  },
  {
    "product": "Trend Micro OfficeScan",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "XG SP1"
      }
    ]
  }
]