Lucene search

K
cveTrendmicroCVE-2019-15625
HistoryJan 18, 2020 - 12:15 a.m.

CVE-2019-15625

2020-01-1800:15:12
trendmicro
web.nvd.nist.gov
136
cve-2019-15625
trend micro
password manager
vulnerability
memory usage
information security
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0

Percentile

15.5%

A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim’s memory processes to extract sensitive information.

Affected configurations

Nvd
Node
trendmicropassword_managerRange3.83.8.0.1052macos
OR
trendmicropassword_managerRange3.83.8.0.1103windows
VendorProductVersionCPE
trendmicropassword_manager*cpe:2.3:a:trendmicro:password_manager:*:*:*:*:*:macos:*:*
trendmicropassword_manager*cpe:2.3:a:trendmicro:password_manager:*:*:*:*:*:windows:*:*

CNA Affected

[
  {
    "product": "Trend Micro Password Manager",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "3.8.0.1103 and below "
      }
    ]
  }
]

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0

Percentile

15.5%

Related for CVE-2019-15625