Authentication Weakness in Trend Micro Email Encryption Gateway

CVE-2018-10355

Summary

The vulnerability in Trend Micro Email Encryption Gateway 5.5 stems from a flaw in the DBCrypto class, which allows an attacker to potentially recover user passwords. Successful exploitation requires prior access to the user database, enabling attackers to leverage this weakness for unauthorized access to sensitive information. Users of the affected product should take immediate precautions to safeguard their systems and consider patching to mitigate the risk.

References