ZDI-23-587: Trend Micro Mobile Security for Enterprises widget WFUser Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Trend Micro Mobile Security for Enterprises. Authentication is not required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-587?
The severity of ZDI-23-587 is critical with a score of 9.8.
How can remote attackers exploit ZDI-23-587?
Remote attackers can exploit ZDI-23-587 by bypassing authentication on affected installations of Trend Micro Mobile Security for Enterprises without requiring any credentials.
What is the affected software of ZDI-23-587?
The affected software of ZDI-23-587 is Trend Micro Mobile Security for Enterprises.
Where can I find more information about ZDI-23-587?
You can find more information about ZDI-23-587 at the following references: [http://www.zerodayinitiative.com/advisories/ZDI-23-587/](http://www.zerodayinitiative.com/advisories/ZDI-23-587/) and [https://success.trendmicro.com/solution/000293106](https://success.trendmicro.com/solution/000293106).
How can I fix ZDI-23-587?
To fix ZDI-23-587, apply the necessary security patches provided by Trend Micro for the affected installations of Mobile Security for Enterprises.