CVE-2020-28577

EUVD-2020-20975
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
References
https://success.trendmicro.com/solution/000281947
https://success.trendmicro.com/solution/000281949
https://www.zerodayinitiative.com/advisories/ZDI-20-1376/
https://success.trendmicro.com/solution/000281947
https://success.trendmicro.com/solution/000281949
https://www.zerodayinitiative.com/advisories/ZDI-20-1376/