Login Request a demo
High severity · published Aug 27, 2020
CVE-2020-15605
If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior…
8.1
CVSS
2.6%
EPSS
No
On KEV
Description
If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this attack. Installations using manager native authentication or SAML authentication are not impacted by this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Deep Security Manager · Trendmicro
10.0; 11.0; 12.0 · source: NVD
VP
Vulnerability Protection · Trendmicro
2.0 · source: NVD
Affected product
DS
Deep Security Manager
Trendmicro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-15605
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-15605
Patch
https://success.trendmicro.com/solution/000252039
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-1083/
More from Deep Security Manager
8.1
CVE-2020-15601
If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unauthenticated attacker with prior knowledge…
7.2
CVE-2020-8602
A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated attacker with full…
4.9
CVE-2019-9488
Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack