critical9.8
CVE-2019-18189
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass…
Impact
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Apex One | All versions |
| Trendmicro | Officescan | Versions 11.0, xg |
| Trendmicro | Worry-Free Business Security | Versions 9.5, 10.0 |