CVEvulnerability
CVE-2019-15627
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-10-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.6 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:C
- Weaknesses
- CWE-59
Description
Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected.
Affected configurations
• trendmicro deep security 10.0
• trendmicro deep security 11.0
• trendmicro deep security 12.0
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://packetstormsecurity.com/files/155579/Trend-Micro-Deep-Security-Agent-11-Arbitrary-File-Overwrite.html packetstormsecurity.com
- https://success.trendmicro.com/solution/000149495 Vendor Advisory
- http://packetstormsecurity.com/files/155579/Trend-Micro-Deep-Security-Agent-11-Arbitrary-File-Overwrite.html packetstormsecurity.com
- https://success.trendmicro.com/solution/000149495 Vendor Advisory