CVE-2019-18189

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions prior to the fixed version Trend Micro OfficeScan versions 11.0 and XG Trend Micro Worry-Free Business Security versions 9.5 and 10.0

Description A directory traversal issue may allow an attacker to bypass authentication and log on to the management console as a root user without requiring authentication.

Recommendations For Trend Micro Apex One, update to a version that includes the fix for this issue. For Trend Micro OfficeScan versions 11.0 and XG, apply the recommended patch or update to a non-vulnerable version. For Trend Micro Worry-Free Business Security versions 9.5 and 10.0, consider restricting access to the management console until a patch is available.