CVE-2020-8600 - Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass authentication

Back Back to CVE browser

CRITICAL

Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass authentication

Published Mar 18, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 4.18%

Description

Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass authentication.

Affected products

Vendor Trend Micro Product Trend Micro Worry-Free Business Security (WFBS) Default
n/a
- Version
  WFBS 9.0, 9.5 and 10.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro

Trend Micro Worry-Free Business Security (WFBS)

n/a

Version	Status	Constraints
WFBS 9.0, 9.5 and 10.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29448
Advisory
https://success.trendmicro.com/jp/solution/000244836
x_refsource_MISCPatchVendor Advisory
https://success.trendmicro.com/solution/000245572
x_refsource_MISCPatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-307/
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29448		Advisory
https://success.trendmicro.com/jp/solution/000244836		x_refsource_MISCPatchVendor Advisory
https://success.trendmicro.com/solution/000245572		x_refsource_MISCPatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-307/		x_refsource_MISCThird Party AdvisoryVDB Entry