VYPR
← All advisories
High severity8.1NVD Advisory· Published Aug 27, 2020· Updated Jun 17, 2026

CVE-2020-15605

CVE-2020-15605

Description

If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this attack. Installations using manager native authentication or SAML authentication are not impacted by this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Trend Micro/Deep Security Manager3 versions
    cpe:2.3:a:trendmicro:deep_security_manager:10.0:-:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:-:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:-:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:12.0:-:*:*:*:*:*:*
  • Trend Micro/Vulnerability Protection3 versions
    cpe:2.3:a:trendmicro:vulnerability_protection:2.0:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:trendmicro:vulnerability_protection:2.0:sp2:*:*:*:*:*:*
    • (no CPE)range: 2.0 SP2
    • (no CPE)range: 2.0 SP2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.