What is the severity of CVE-2019-19696?

CVE-2019-19696 is classified as a medium severity vulnerability.

How do I fix CVE-2019-19696?

To mitigate CVE-2019-19696, ensure that you update your Trend Micro Password Manager to the latest version.

Which versions of Trend Micro Password Manager are affected by CVE-2019-19696?

CVE-2019-19696 affects Trend Micro Password Manager versions prior to 5.0.0.1076 for Windows and 5.0.1047 for macOS.

What type of information is compromised in CVE-2019-19696?

CVE-2019-19696 may allow unauthorized access to the localhost.key of RootCA.crt, enabling the creation of malicious self-signed SSL certificates.

What can attackers do with the vulnerability CVE-2019-19696?

Attackers exploiting CVE-2019-19696 could redirect users to phishing sites by creating fraudulent SSL certificates.

Vulnerability/
CVE-2019-19696

medium

5.5

CWE

522

17/1/2020

5/8/2024

CVE-2019-19696

First published: Fri Jan 17 2020(Updated: )

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.

Credit: security@trendmicro.com

Affected Software	Affected Version	How to fix
Trendmicro Password Manager	>=5.0<=5.0.0.1076
Trendmicro Password Manager	>=5.0<=5.0.1047

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-19696?
CVE-2019-19696 is classified as a medium severity vulnerability.
How do I fix CVE-2019-19696?
To mitigate CVE-2019-19696, ensure that you update your Trend Micro Password Manager to the latest version.
Which versions of Trend Micro Password Manager are affected by CVE-2019-19696?
CVE-2019-19696 affects Trend Micro Password Manager versions prior to 5.0.0.1076 for Windows and 5.0.1047 for macOS.
What type of information is compromised in CVE-2019-19696?
CVE-2019-19696 may allow unauthorized access to the localhost.key of RootCA.crt, enabling the creation of malicious self-signed SSL certificates.
What can attackers do with the vulnerability CVE-2019-19696?
Attackers exploiting CVE-2019-19696 could redirect users to phishing sites by creating fraudulent SSL certificates.

collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/author
agent/last-modified-date
agent/tags
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/source
vendor/trendmicro
canonical/trendmicro password manager
version/trendmicro password manager/5.0
version/trendmicro password manager/5.0.0.1076
version/trendmicro password manager/5.0.1047

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.