CVE-2019-15626: High severity trend micro deep security manager vulnerability
Published Oct 17, 2019
·Updated
The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability.
Affected Software
3 affected components
trendmicro Deep Security=10.0
trendmicro Deep Security=11.0
trendmicro Deep Security=12.0
Remediation
Patch Available
Event History
Oct 17, 2019
CVE Published
via MITRE·07:09 PM
Data Sourced
via MITRE·07:09 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-15626.
2
What is the severity of CVE-2019-15626?
The severity of CVE-2019-15626 is high with a CVSS score of 7.5.
3
Which versions of the Deep Security Manager application are affected?
Versions 10.0, 11.0, and 12.0 of the Deep Security Manager application are affected.
4
How does CVE-2019-15626 impact confidentiality?
CVE-2019-15626 may result in confidentiality impact as initial LDAP communication may be transmitted in clear text.
5
How can I fix CVE-2019-15626?
To fix CVE-2019-15626, update your Deep Security Manager application to a version that addresses this vulnerability.