CVE-2019-18189

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@trendmicro.com

Published

2019-10-28

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Trend Micro Apex One (Trend Micro)
• Trend Micro Officescan Osce (Trend Micro)
• Trend Micro Worry-free Business Security Wfbs (Trend Micro)
• Apex One (Trendmicro)
• Officescan (Trendmicro)
• Worry-free Business Security (Trendmicro)

References

• https://success.trendmicro.com/solution/000151732