Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9jm6-6j35-x89g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.

EPSS

Процентиль: 33%
0.00134
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200
CWE-522

Связанные уязвимости

CVSS3: 5.5
nvd
около 6 лет назад

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.

EPSS

Процентиль: 33%
0.00134
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200
CWE-522