Unrated severityNVD Advisory· Published Dec 1, 2020· Updated Aug 4, 2024

CVE-2020-28577

Description

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Officescanllm-fuzzy
Range: SP1
Trend Micro/Apex Onellm-fuzzy
Trend Micro/Trend Micro Apex Onev5
Range: 2019
Trend Micro/Trend Micro OfficeScanv5
Range: XG SP1

Patches

Vulnerability mechanics

References

success.trendmicro.com/solution/000281947mitrex_refsource_MISC
success.trendmicro.com/solution/000281949mitrex_refsource_MISC
www.zerodayinitiative.com/advisories/ZDI-20-1376/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000