ZDI-20-1083: Trend Micro Vulnerability Protection Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Trend Micro Vulnerability Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Vulnerability Protection console. The issue results from the lack of proper validation prior to authentication. An attacker can leverage this vulnerability to bypass authentication on the system.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro Vulnerability Protection |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-20-1083?
The severity of ZDI-20-1083 is critical as it allows remote attackers to bypass authentication.
How do I fix ZDI-20-1083?
To fix ZDI-20-1083, update your Trend Micro Vulnerability Protection to the latest version that addresses this vulnerability.
What impact does ZDI-20-1083 have on my system?
ZDI-20-1083 allows unauthorized access to the Vulnerability Protection console, potentially compromising system security.
Can ZDI-20-1083 be exploited remotely?
Yes, ZDI-20-1083 can be exploited remotely without authentication by attackers.
Which product is affected by ZDI-20-1083?
The affected product is Trend Micro Vulnerability Protection.
- agent/references
- agent/type
- agent/softwarecombine
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-20-1083
- alias/ZDI-CAN-11431
- alias/CVE-2020-15605
- agent/software-canonical-lookup
- agent/title
- agent/severity
- agent/tags
- agent/description
- agent/event
- agent/source
- vendor/trend micro
- canonical/trend micro vulnerability protection