PT-2019-19681 · Trend Micro · Trend Micro Officescan+2

Published 2019-04-05 · Updated 2021-09-24 · CVE-2019-9489

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified) Trend Micro OfficeScan versions XG and 11.0 Trend Micro Worry-Free Business Security versions 10.0, 9.5, and 9.0

Description A directory traversal issue could allow an attacker to modify arbitrary files on the management console of the affected product.

Recommendations For Trend Micro Apex One, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Trend Micro OfficeScan versions XG and 11.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Trend Micro Worry-Free Business Security versions 10.0, 9.5, and 9.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-9489

Affected Products

Trend Micro Apex One

Trend Micro Officescan

Trend Micro Worry-Free Business Security

References · 4

• https://osv.dev/vulnerability/CVE-2019-9489 · Vendor Advisory
• https://success.trendmicro.com/jp/solution/1122253 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9489 · Security Note
• https://success.trendmicro.com/solution/1122250 · Vendor Advisory