Trend Micro Endpoint Encryption PolicyServer Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in Trend Micro Endpoint Encryption PolicyServer versions prior to 6.0.0.4013. This vulnerability allows attackers to access key methods as an admin user and modify product configurations on affected installations. The issue arises from an improper implementation of an authentication algorithm in the DbAppDomain service, enabling remote attackers to bypass authentication without requiring prior access or credentials.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized access to admin-level methods and the ability to modify product configurations on the affected system.

Remediation

Trend Micro has released a patch for this vulnerability in Endpoint Encryption PolicyServer Version 6.0.0.4013. This update is now available for download.