Trend Micro · Trend Micro Security 2019 · CVE-2020-15604
**Name of the Vulnerable Software and Affected Versions**
Trend Micro Security 2019 version 15
**Description**
The issue is related to an incomplete SSL server certification validation, which could be exploited by an attacker in combination with another attack to trick the client into downloading a malicious update. This is due to the update files not being properly verified, as described by CWE-494.
**Recommendations**
For Trend Micro Security 2019 version 15, ensure that update files are properly verified to prevent malicious updates. As a temporary workaround, consider restricting automatic updates until a fix is available.