What is the severity of CVE-2018-10355?

CVE-2018-10355 has a medium severity rating due to its impact on user password confidentiality.

How do I fix CVE-2018-10355?

To mitigate CVE-2018-10355, update Trend Micro Email Encryption Gateway to the latest version beyond 5.5.

What type of vulnerability is CVE-2018-10355?

CVE-2018-10355 is an authentication weakness vulnerability that allows for password recovery exploitation.

Which versions of Trend Micro Email Encryption Gateway are affected by CVE-2018-10355?

CVE-2018-10355 affects all versions of Trend Micro Email Encryption Gateway up to and including version 5.5.

What is required for an attacker to exploit CVE-2018-10355?

An attacker must gain access to the user database on the target system to exploit CVE-2018-10355.

Vulnerability/
CVE-2018-10355

high

CWE

522

23/5/2018

5/8/2024

24/2/2025

CVE-2018-10355: Trend Micro Encryption for Email Gateway DBCrypto Authentication Weakness Vulnerability

First published: Wed May 23 2018(Updated: )

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploit this vulnerability.

Credit: security@trendmicro.com

Affected Software	Affected Version	How to fix
Trend Micro Email Encryption Gateway	<=5.5
Trend Micro Encryption for Email

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-10355?
CVE-2018-10355 has a medium severity rating due to its impact on user password confidentiality.
How do I fix CVE-2018-10355?
To mitigate CVE-2018-10355, update Trend Micro Email Encryption Gateway to the latest version beyond 5.5.
What type of vulnerability is CVE-2018-10355?
CVE-2018-10355 is an authentication weakness vulnerability that allows for password recovery exploitation.
Which versions of Trend Micro Email Encryption Gateway are affected by CVE-2018-10355?
CVE-2018-10355 affects all versions of Trend Micro Email Encryption Gateway up to and including version 5.5.
What is required for an attacker to exploit CVE-2018-10355?
An attacker must gain access to the user database on the target system to exploit CVE-2018-10355.

agent/type
agent/references
collector/mitre-cve
source/MITRE
agent/title
agent/weakness
agent/last-modified-date
agent/author
agent/first-publish-date
agent/description
agent/severity
agent/event
agent/trending
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/zdi-advisory
source/ZDI
alias/ZDI-18-411
alias/ZDI-CAN-5513
alias/CVE-2018-10355
agent/software-canonical-lookup
agent/softwarecombine
vendor/trendmicro
canonical/trend micro email encryption gateway
version/trend micro email encryption gateway/5.5
vendor/trend micro
canonical/trend micro encryption for email

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.