CVE-2018-10355

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploi...

CVE-2018-10355

CVE-2018-10355 affects Trend Micro Email Encryption Gateway (TMEEG) version 5.5. The vulnerability resides in the DBCrypto class, which stores user passwords using a hard-coded key in a recoverable format. An attacker who gains access to the target’s user database can exploit the flaw to recover ...

CVE-2018-10355

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploi...

CVE-2018-10355: Insufficiently Protected Credentials

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploi...

PT-2018-9841

Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: The issue is related to an authentication weakness due to a flaw in the DBCrypto class, which could allow an attacker to recover user passwords if they first obtain access to the...