CVE-2020-15605
If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.76%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this attack. Installations using manager native authentication or SAML authentication are not impacted by this vulnerability.
- CVSS 3.1
- 8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.76% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- trendmicro/deep security manager · trendmicro/vulnerability protection
- Source
- security@trendmicro.com
References
- https://success.trendmicro.com/solution/000252039Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-1083/Third Party Advisory, VDB Entry
- https://success.trendmicro.com/solution/000252039Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-1083/Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.