LDAP Authentication Bypass in Trend Micro Deep Security

CVE-2020-15601

Summary

An LDAP authentication bypass vulnerability exists in Trend Micro Deep Security versions 10.x through 12.x, which may allow an unauthenticated attacker—who has prior knowledge of the organization—to bypass manager authentication if LDAP authentication is enabled. To mitigate this risk, implementing multi-factor authentication is recommended. It's important to note that installations using manager native authentication or SAML authentication are unaffected by this vulnerability.

References