CVE-2019-19696 - A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites

Back Back to CVE browser

MEDIUM

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites

Published Jan 17, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.47%

Description

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.

Affected products

Vendor Trend Micro Product Trend Micro Password Manager Default
n/a
- Version
  5.0.0.1076 and below (Windows) and 5.0.1047 and below (Mac)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro

Trend Micro Password Manager

n/a

Version	Status	Constraints
5.0.0.1076 and below (Windows) and 5.0.1047 and below (Mac)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (4)

https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspx
x_refsource_MISCVendor Advisory
https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1124091.aspx
x_refsource_MISCVendor Advisory
https://jvn.jp/en/jp/JVN37183636/index.html
x_refsource_MISCThird Party Advisory
https://jvn.jp/jp/JVN37183636/index.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspx		x_refsource_MISCVendor Advisory
https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1124091.aspx		x_refsource_MISCVendor Advisory
https://jvn.jp/en/jp/JVN37183636/index.html		x_refsource_MISCThird Party Advisory
https://jvn.jp/jp/JVN37183636/index.html		x_refsource_MISCThird Party Advisory