PT-2017-13245
CVE-2017-14090
·
Published
2017-12-15
·
Updated
2017-12-26
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Trend Micro ScanMail for Exchange version 12.0
Description
A vulnerability exists in Trend Micro ScanMail for Exchange where some communications to the update servers are not encrypted.
Recommendations
For version 12.0, ensure that all communications to the update servers are encrypted to mitigate the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾