PT-2020-20232

CVE-2020-8602

·

تاريخ النشر

2020-08-27

·

تاريخ التحديث

2021-07-21

الوصف من

CVSS 3.1
7.2
عالية
المقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security versions 10.0 through 12.0 Trend Micro Vulnerability Protection version 2.0 SP2
Description A vulnerability in the management consoles may allow an authenticated attacker with full control privileges to bypass file integrity checks, leading to remote code execution.
Recommendations For Trend Micro Deep Security versions 10.0 through 12.0, update to a version that includes a fix for this issue. For Trend Micro Vulnerability Protection version 2.0 SP2, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the management consoles to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾