jvndb-2022-001494
Vulnerability from jvndb
Published
2022-03-31 17:25
Modified
2022-03-31 17:25
Severity ?
Summary
Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents
Details
Trend Micro Apex Central and Trend Micro Apex Central as a Service provided by Trend Micro Incorporated are vulnerable to improper check for file contents (CWE-345, CVE-2022-26871).
Trend Micro Incorporated states that attacks has been observed.
Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.
References
| ▼ | Type | URL |
|---|---|---|
| JVN | http://jvn.jp/en/vu/JVNVU99107357/index.html | |
| CVE | https://www.cve.org/CVERecord?id=CVE-2022-26871 | |
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2022-26871 | |
| JPCERT-WR | https://www.jpcert.or.jp/english/at/2022/at220008.html | |
| CISA Known Exploited Vulnerabilities Catalog | https://cisa.gov/known-exploited-vulnerabilities-catalog | |
| Insufficient Verification of Data Authenticity(CWE-345) | https://cwe.mitre.org/data/definitions/345.html |
Impacted products
| ▼ | Vendor | Product |
|---|---|---|
| Trend Micro, Inc. | Apex Central |
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-001494.html",
"dc:date": "2022-03-31T17:25+09:00",
"dcterms:issued": "2022-03-31T17:25+09:00",
"dcterms:modified": "2022-03-31T17:25+09:00",
"description": "Trend Micro Apex Central and Trend Micro Apex Central as a Service provided by Trend Micro Incorporated are vulnerable to improper check for file contents (CWE-345, CVE-2022-26871).\r\n\r\nTrend Micro Incorporated states that attacks has been observed.\r\n\r\nTrend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.",
"link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-001494.html",
"sec:cpe": {
"#text": "cpe:/a:trendmicro:apex_central",
"@product": "Apex Central",
"@vendor": "Trend Micro, Inc.",
"@version": "2.2"
},
"sec:cvss": [
{
"@score": "7.5",
"@severity": "High",
"@type": "Base",
"@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"@version": "2.0"
},
{
"@score": "8.6",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2022-001494",
"sec:references": [
{
"#text": "http://jvn.jp/en/vu/JVNVU99107357/index.html",
"@id": "JVNVU#99107357",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2022-26871",
"@id": "CVE-2022-26871",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-26871",
"@id": "CVE-2022-26871",
"@source": "NVD"
},
{
"#text": "https://www.jpcert.or.jp/english/at/2022/at220008.html",
"@id": "JPCERT-AT-2022-0008",
"@source": "JPCERT-WR"
},
{
"#text": "https://cisa.gov/known-exploited-vulnerabilities-catalog",
"@id": "CVE-2022-26871",
"@source": "CISA Known Exploited Vulnerabilities Catalog"
},
{
"#text": "https://cwe.mitre.org/data/definitions/345.html",
"@id": "CWE-345",
"@title": "Insufficient Verification of Data Authenticity(CWE-345)"
}
],
"title": "Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.