CVE-2020-15605: Trend Micro Vulnerability Protection Authentication Bypass Vulnerability
First published: Thu Aug 27 2020(Updated: )
If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this attack. Installations using manager native authentication or SAML authentication are not impacted by this vulnerability.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro Deep Security Manager | =10.0 | |
| Trend Micro Deep Security Manager | =11.0 | |
| Trend Micro Deep Security Manager | =12.0 | |
| Trend Micro Deep Security Manager | =2.0-sp2 | |
| Microsoft Windows | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/author
- agent/severity
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-20-1083
- alias/ZDI-CAN-11431
- alias/CVE-2020-15605
- agent/software-canonical-lookup
- vendor/trendmicro
- canonical/trend micro deep security manager
- version/trend micro deep security manager/10.0
- version/trend micro deep security manager/11.0
- version/trend micro deep security manager/12.0
- version/trend micro deep security manager/2.0-sp2
- vendor/microsoft
- canonical/microsoft windows
- vendor/trend micro
- canonical/trend micro vulnerability protection