CVE-2020-15601

If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this...

PT-2020-20232

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security versions 10.0 through 12.0 Trend Micro Vulnerability Protection version 2.0 SP2 Description A vulnerability in the management consoles may allow an authenticated attacker with full control privileges to bypass file...

Trend Micro Vulnerability Protection Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Trend Micro Vulnerability Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Vulnerability Protection console. The issue results from the lac...

CVE-2020-15601: Improper Authentication

If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this...

CVE-2020-15605: Improper Authentication

If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents...

CVE-2020-8602: Undefined Security Weakness

A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated attacker with full control privileges to bypass file integrity checks, leading to remote code execution...

PT-2020-3966

Name of the Vulnerable Software and Affected Versions: Trend Micro Vulnerability Protection version 2.0 SP2 Description: The issue is related to an authentication bypass vulnerability when LDAP authentication is enabled. This could allow an unauthenticated attacker with prior knowledge of the...

Removing Open Source Visibility Challenges for Security Operations Teams

Identifying security threats early can be difficult, especially when you’re running multiple security tools across disparate business units and cloud projects. When it comes to protecting cloud-native applications, separating legitimate risks from noise and distractions is often a real challenge...

This Week in Security News: Trend Micro’s Zero Day Initiative Celebrates 15 Years and 24 Million Customers Affected after Experian Data Breach

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read how the Zero Day Initiative ZDI has awarded more than $25 million in bounty rewards to security researchers over the past decade and a...

PT-2020-14525

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security versions 10.x through 12.x Description The issue allows an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication if LDAP authentication is enabled. Enabling...

CVE-2020-11848

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

CVE-2020-11848

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

Denial of service

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

CVE-2020-11848

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

CVE-2020-11848

CVE-2020-11848 is a DoS vulnerability in Micro Focus ArcSight Management Center (ArcMC). Connected documents confirm affected software as ArcMC versions prior to 2.9.5, with the impact described as the server becoming unavailable (denial of service). The Red Hat and CNVD entries corroborate the s...

PT-2020-12891

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Management Center versions prior to 2.9.5 Description The issue is a denial of service vulnerability that could cause the server to become unavailable. Recommendations For versions prior to 2.9.5, update to version 2.9.5 o...

CVE-2020-11848: Undefined Security Weakness

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

Trend Micro Worry-Free Business Security Path Traversal Authentication Bypass (000245572)

The Trend Micro Worry-Free Business Security WFBS is affected by a path traversal vulnerability in cgiRecvFile.exe due to improper validation of a user-supplied path prior to using it in file operations when handling the TempFileName parameter in an HTTP request. An unauthenticated, remote attack...

Trend Micro Worry-Free Business Security Detection

Binary data trendmicrowfbsdetect.nbin...

This Week in Security News: Microsoft Patches 120 Vulnerabilities, Including Two Zero-Days and Trend Micro Brings DevOps Agility and Automation to Security Operations Through Integration with AWS Solutions

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about one of Microsoft’s largest Patch Tuesday updates ever, including fixes for 120 vulnerabilities and two zero-days. Also, learn abo...