CVE-2019-15626
First published: Thu Oct 17 2019(Updated: )
The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro Deep Security | =10.0 | |
| Trend Micro Deep Security | =11.0 | |
| Trend Micro Deep Security | =12.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-15626.
What is the severity of CVE-2019-15626?
The severity of CVE-2019-15626 is high with a CVSS score of 7.5.
Which versions of the Deep Security Manager application are affected?
Versions 10.0, 11.0, and 12.0 of the Deep Security Manager application are affected.
How does CVE-2019-15626 impact confidentiality?
CVE-2019-15626 may result in confidentiality impact as initial LDAP communication may be transmitted in clear text.
How can I fix CVE-2019-15626?
To fix CVE-2019-15626, update your Deep Security Manager application to a version that addresses this vulnerability.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/references
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/trendmicro
- canonical/trend micro deep security
- version/trend micro deep security/10.0
- version/trend micro deep security/11.0
- version/trend micro deep security/12.0