QwikSec

Security Database

CVE

CWE

Training

CVE-2020-15604

Published: Sep 24, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified.

Vendor	Product	Versions
Trend Micro	Trend Micro Security (Consumer)	affected `2019 (v15)`

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-09890

x_refsource_MISC

https://helpcenter.trendmicro.com/ja-jp/article/TMKA-09673

x_refsource_MISC

https://jvn.jp/en/jp/JVN60093979/

x_refsource_MISC

https://jvn.jp/jp/JVN60093979/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.