Sensitive Information Disclosure in Trend Micro Mobile Security by Trend Micro
CVE-2023-35695

7.5HIGH

Key Information:

Vendor
Trend Micro
Status
Trend Micro Moibile Security For Enterprise
Vendor
CVE Published:
26 June 2023

Summary

A vulnerability exists in Trend Micro Mobile Security (Enterprise) 9.8 SP5 that enables a remote attacker to download specific log files. These log files may contain sensitive information related to the product, potentially compromising the privacy and security of users. Organizations are advised to address this issue promptly to safeguard against unauthorized access.

Affected Version(s)

Trend Micro Moibile Security for Enterprise 9.8 SP5 < 9.8.3294

References

https://success.trendmicro.com/dcx/s/solution/000293106?l...
https://www.tenable.com/security/research/tra-2023-17

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.