deep_security Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/deep_security/ Sun, 26 Feb 2023 06:31:00 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png deep_security Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/deep_security/ 32 32 CVE-2019-15626 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15626/ Sun, 26 Feb 2023 06:31:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15626/ The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability.

The post CVE-2019-15626 appeared first on CVE Vulnerability.

]]> The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability.

The post CVE-2019-15626 appeared first on CVE Vulnerability.

]]> CVE-2019-15627 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15627/ Sun, 26 Feb 2023 06:31:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15627/ Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected.

The post CVE-2019-15627 appeared first on CVE Vulnerability.

]]> Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected.

The post CVE-2019-15627 appeared first on CVE Vulnerability.

]]> CVE-2022-40707 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-40707/ Thu, 23 Feb 2023 05:20:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-40707/ An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One – Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This […]

The post CVE-2022-40707 appeared first on CVE Vulnerability.

]]> An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One – Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40708.

The post CVE-2022-40707 appeared first on CVE Vulnerability.

]]> CVE-2022-40708 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-40708/ Thu, 23 Feb 2023 05:20:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-40708/ An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One – Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This […]

The post CVE-2022-40708 appeared first on CVE Vulnerability.

]]> An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One – Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.

The post CVE-2022-40708 appeared first on CVE Vulnerability.

]]> CVE-2022-40709 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-40709/ Thu, 23 Feb 2023 05:20:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-40709/ An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One – Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This […]

The post CVE-2022-40709 appeared first on CVE Vulnerability.

]]> An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One – Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707 and 40708.

The post CVE-2022-40709 appeared first on CVE Vulnerability.

]]> CVE-2022-40710 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-40710/ Thu, 23 Feb 2023 05:20:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-40710/ A link following vulnerability in Trend Micro Deep Security 20 and Cloud One – Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-40710 appeared first on CVE Vulnerability.

]]> A link following vulnerability in Trend Micro Deep Security 20 and Cloud One – Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-40710 appeared first on CVE Vulnerability.

]]>