The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager, related to authentication deficiencies, allow attackers to enhance their privileges.

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager are related to authentication deficiencies. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase their privileges...

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager, related to authentication deficiencies, allow attackers to enhance their privileges.

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager are related to authentication deficiencies. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase their privileges...

CVE-2020-15605

The CVE-2020-15605 entry concerns Trend Micro Vulnerability Protection 2.0 SP2 with LDAP authentication enabled. The flaw allows an unauthenticated attacker who has knowledge of the targeted organization to bypass the manager authentication mechanism via LDAP authentication bypass. The impact is ...

CVE-2020-8602: Undefined Security Weakness

A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated attacker with full control privileges to bypass file integrity checks, leading to remote code execution...

CVE-2020-15605: Improper Authentication

If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents...

PT-2020-3966

Name of the Vulnerable Software and Affected Versions: Trend Micro Vulnerability Protection version 2.0 SP2 Description: The issue is related to an authentication bypass vulnerability when LDAP authentication is enabled. This could allow an unauthenticated attacker with prior knowledge of the...

PT-2020-20232

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security versions 10.0 through 12.0 Trend Micro Vulnerability Protection version 2.0 SP2 Description A vulnerability in the management consoles may allow an authenticated attacker with full control privileges to bypass file...

CVE-2020-8601: Uncontrolled Search Path Element

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

PT-2020-20231

Name of the Vulnerable Software and Affected Versions Trend Micro Vulnerability Protection version 2.0 Description The issue allows an attack to use the product installer to load other DLL files located in the same directory. Recommendations For Trend Micro Vulnerability Protection version 2.0,...

PT-2019-19680

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security Manager versions 10.x through 11.x Trend Micro Vulnerability Protection version 2.0 Description The issue allows for a XML External Entity Attack. However, the attack requires the attacker to have root or admin access...

CVE-2019-9488: Improper Restriction of XML External Entity Reference

Trend Micro Deep Security Manager 10.x, 11.x and Vulnerability Protection 2.0 are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager DSM...