CVE-2019-19696: Medium severity trend micro password manager vulnerability
A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19696?
CVE-2019-19696 is classified as a medium severity vulnerability.
How do I fix CVE-2019-19696?
To mitigate CVE-2019-19696, ensure that you update your Trend Micro Password Manager to the latest version.
Which versions of Trend Micro Password Manager are affected by CVE-2019-19696?
CVE-2019-19696 affects Trend Micro Password Manager versions prior to 5.0.0.1076 for Windows and 5.0.1047 for macOS.
What type of information is compromised in CVE-2019-19696?
CVE-2019-19696 may allow unauthorized access to the localhost.key of RootCA.crt, enabling the creation of malicious self-signed SSL certificates.
What can attackers do with the vulnerability CVE-2019-19696?
Attackers exploiting CVE-2019-19696 could redirect users to phishing sites by creating fraudulent SSL certificates.