PT-2018-17417 · Trend Micro · Trend Micro Email Encryption Gateway

Leandro Barragan + 1 · Publicado 2018-03-15 · Atualizado 2018-04-04 · CVE-2018-6219

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5

Description The issue allows an attacker to eavesdrop and tamper with certain types of update data due to an insecure update via HTTP.

Recommendations For version 5.5, consider updating to a newer version that uses secure update protocols to prevent eavesdropping and tampering. As a temporary workaround, restrict access to update mechanisms to minimize the risk of exploitation.

Exploit

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2018-6219

Produtos afetados

Trend Micro Email Encryption Gateway

Referências · 5

• 🔥 https://coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/44166 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6219 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6219 · Aviso do Fabricante
• https://success.trendmicro.com/solution/1119349 · Aviso do Fabricante