trendmicro deep security manager 12.0 vulnerabilities and exploits

(subscribe to this query)

A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an malicious user to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the...

Trendmicro Deep Security Agent Trendmicro Deep Security Agent 10.0 Trendmicro Deep Security Agent 11.0 Trendmicro Deep Security Agent 12.0

1 Github repository

Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.

If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication p...

Trendmicro Deep Security Manager 10.0 Trendmicro Deep Security Manager 11.0 Trendmicro Deep Security Manager 12.0 Trendmicro Vulnerability Protection 2.0

If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authent...

Trendmicro Deep Security Manager 10.0 Trendmicro Deep Security Manager 11.0 Trendmicro Deep Security Manager 12.0 Trendmicro Vulnerability Protection 2.0

A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated attacker with full control privileges to bypass file integrity checks, leading to remote code execution.

Trendmicro Deep Security Manager 10.0 Trendmicro Deep Security Manager 11.0 Trendmicro Deep Security Manager 12.0 Trendmicro Vulnerability Protection 2.0

The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability.

Trendmicro Deep Security 12.0 Trendmicro Deep Security 10.0 Trendmicro Deep Security 11.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook