Vulnerability · Published Aug 27, 2020 · Assigned by trendmicro

CVE-2020-15605

High 8.1

In plain English

A high-severity security flaw in Trend Micro Vulnerability Protection from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).

Severity (CVSS NVD)8.1High

Exploit odds (30 days)2.6%top 14.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this attack. Installations using manager native authentication or SAML authentication are not impacted by this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
Trend Micro	Trend Micro Vulnerability Protection	2.0 SP2

References

https://success.trendmicro.com/solution/000252039 x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-20-1083/ x_refsource_MISC