PT-2020-17017

CVE-2020-28574

·

Published

2020-11-18

·

Updated

2020-12-02

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security version 10 SP1
Description A path traversal vulnerability could allow an unauthenticated attacker to modify or delete arbitrary files on the product's management console. This issue affects the management console of the product, allowing potential modification or deletion of files without proper authentication.
Recommendations For Trend Micro Worry-Free Business Security version 10 SP1, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the management console to minimize the risk of unauthorized file modification or deletion.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾