PT-2019-15264 · Trend Micro · Trend Micro Deep Security As A Service

Published 2019-12-16 · Updated 2020-08-24 · CVE-2019-18191

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security as a Service (affected versions not specified)

Description A privilege escalation issue exists in the Quick Setup cloud formation template of Trend Micro Deep Security as a Service. This could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2019-18191

Affected Products

Trend Micro Deep Security As A Service

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-18191 · Security Note
• https://success.trendmicro.com/solution/000157758 · Vendor Advisory