PT-2019-15262
CVE-2019-18189
·
تاريخ النشر
2019-10-28
·
تاريخ التحديث
2019-11-05
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Trend Micro Apex One versions prior to the fixed version
Trend Micro OfficeScan versions 11.0 and XG
Trend Micro Worry-Free Business Security versions 9.5 and 10.0
Description
A directory traversal issue may allow an attacker to bypass authentication and log on to the management console as a root user without requiring authentication.
Recommendations
For Trend Micro Apex One, update to a version that includes the fix for this issue.
For Trend Micro OfficeScan versions 11.0 and XG, apply the recommended patch or update to a non-vulnerable version.
For Trend Micro Worry-Free Business Security versions 9.5 and 10.0, consider restricting access to the management console until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾