Improper Access Control in Trend Micro Apex One and OfficeScan Products
CVE-2021-25235

5.3MEDIUM

Key Information:

Vendor: Trend Micro
Status: Trend Micro Apex One; Trend Micro Officescan
Vendor: CVE Published:; 4 February 2021

🔔 Create Trend Micro Vulnerability Alert

What is CVE-2021-25235?

An improper access control vulnerability exists in Trend Micro Apex One, both on-premises and SaaS versions, as well as OfficeScan XG SP1. This flaw could enable unauthorized users to access and obtain information regarding a content inspection configuration file, potentially exposing sensitive configurations and exposing systems to further vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch