PT-2018-9841
CVE-2018-10355
·
تاريخ النشر
2018-05-04
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Trend Micro Email Encryption Gateway version 5.5
Description:
The issue is related to an authentication weakness due to a flaw in the DBCrypto class, which could allow an attacker to recover user passwords if they first obtain access to the user database on the target system.
Recommendations:
For Trend Micro Email Encryption Gateway version 5.5, consider restricting access to the user database to minimize the risk of exploitation, and apply any available patches or updates from the vendor to fix the flaw in the DBCrypto class.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾