PT-2019-19681 · Trend Micro · Trend Micro Officescan+2

Publicado 2019-04-05 · Atualizado 2021-09-24 · CVE-2019-9489

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified) Trend Micro OfficeScan versions XG and 11.0 Trend Micro Worry-Free Business Security versions 10.0, 9.5, and 9.0

Description A directory traversal issue could allow an attacker to modify arbitrary files on the management console of the affected product.

Recommendations For Trend Micro Apex One, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Trend Micro OfficeScan versions XG and 11.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Trend Micro Worry-Free Business Security versions 10.0, 9.5, and 9.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-9489

Produtos afetados

Trend Micro Apex One

Trend Micro Officescan

Trend Micro Worry-Free Business Security

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-9489 · Aviso do Fabricante
• https://success.trendmicro.com/jp/solution/1122253 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9489 · Nota de Segurança
• https://success.trendmicro.com/solution/1122250 · Aviso do Fabricante