9.8Kritik
CVE-2025-49216
Açıklama
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.
Zayıflık türü (CWE):
CWE-477
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Trend Micro, Inc. | Trend Micro Endpoint Encryption Policy Server | 6.0 – < 6.0.0.4013 | |
| trendmicro | endpoint encryption policy server | 6.0.0.4013 | |
| trendmicro | trend micro endpoint encryption | < 6.0.0.4013 |
Kaynaklar ve yamalar
- https://success.trendmicro.com/en-US/solution/KA-0019928 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-25-373/ Third Party Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:trendmicro:trend_micro_endpoint_encryption:*:*:*:*:*:*:*:*< 6.0.0.4013