CVE-2019-18189

2019-10-2819:28:32

trendmicro

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product’s management console as a root user. The vulnerability does not require authentication.

CNA Affected

[
  {
    "product": "Trend Micro Apex One, Trend Micro OfficeScan (OSCE), Trend Micro Worry-Free Business Security (WFBS)",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "Apex One (All), OSCE (11.0, XG), WFBS (9.5, 10.0)"
      }
    ]
  }
]

References

success.trendmicro.com/solution/000151732