CVE-2020-24560

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 version 15

Description The issue is related to an incomplete SSL server certification validation, which could be exploited by an attacker to trick an affected client into downloading a malicious update. This is due to improper server certificate verification in the communication with the update server.

Recommendations For Trend Micro Security 2019 version 15, ensure proper server certificate verification is in place to prevent malicious updates. As a temporary workaround, consider restricting communication with the update server until a patch is available.