CVE-2018-10355

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable…

published May 23, 2018

CVSS
—
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploit this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00606 · 48.3th percentile
Published
2018-05-23T16:00Z
EPSS history
Timeline
  • 23 MAY 16:00Z
    An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable…
    cvelistv5