CVE-2019-9488

Опубликовано: 11 сент. 2019

Источник: nvd

CVSS3: 4.9

CVSS2: 4

EPSS Низкий

Описание

Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).

Ссылки

https://success.trendmicro.com/solution/1122900
Patch
Vendor Advisory
https://success.trendmicro.com/solution/1122900
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trendmicro:deep_security_manager:10.0:-:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u1:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u10:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u11:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u12:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u13:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u14:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u15:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u16:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u17:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u18:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u19:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u2:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u3:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u4:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u5:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u6:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u7:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u8:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:10.0:u9:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.0:-:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.0:u1:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.0:u2:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.0:u3:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.0:u4:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.0:u5:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.0:u6:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.0:u7:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_security_manager:11.3:-:*:*:*:*:*:*

cpe:2.3:a:trendmicro:vulnerability_protection:2.0:-:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00596

Низкий

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-8jfp-988r-jm7r