A directory traversal vulnerability in Trend Micro Apex One OfficeScan (11.0 XG) and Worry-Free Business Security (9.5 10.0) may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication.