CVEvulnerability

CVE-2019-19696

5.5 MEDIUM Published 2020-01-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-522

Description

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.

Affected configurations

• trendmicro password manager (>= 5.0 <= 5.0.0.1076) • trendmicro password manager (>= 5.0 <= 5.0.1047)

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References