CVE-2019-19691

Medium

Description

A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability.

SeverityMedium
CVSS4.9
Exploit probability—
ProductTrendmicro Apex One
PublishedDec 20, 2019
First seenDec 20, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
trendmicro apex_one2019—
trendmicro officescanxg—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.