CVE-2019-19691 — Micro Apex ONE AND Officescan vulnerability

3 documents3 sources
Severity
4.9MEDIUMNVD
EPSS
0.5%
top 33.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Trend Micro Apex ONE AND OfficescanTrendmicro Apex ONETrendmicro Officescan
Timeline
PublishedDec 20
Latest updateMay 24

Description

A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5trend_micro/trend_micro_apex_one_and_officescanApex One 2019, OfficeScan XG

🔴Vulnerability Details

2
GHSA
GHSA-hp44-w352-x4mm: A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements usin↗2022-05-24
▶
CVEList
CVE-2019-19691: A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements usin↗2019-12-20
▶