Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h6wp-6m5m-gc8m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified.

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified.

EPSS

Процентиль: 46%
0.00232
Низкий

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified.

EPSS

Процентиль: 46%
0.00232
Низкий

Дефекты

CWE-295