Vulnerability · Published Aug 27, 2020 · Assigned by trendmicro
CVE-2020-15601
High 8.1
In plain English
A high-severity security flaw in Trend Micro Deep Security from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).
Severity (CVSS NVD)8.1High
Exploit odds (30 days)2.6%top 14.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this attack. Installations using manager native authentication or SAML authentication are not impacted by this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro Deep Security | 10.0, 11.0, 12.0 |
References
- https://success.trendmicro.com/solution/000252039 x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-20-1077/ x_refsource_MISC