Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-10353

A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable insta

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trendmicro

Description

A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable installations due to a flaw in the formChangePass class. Authentication is required to exploit this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trend Micro Trend Micro Email Encryption Gateway

  • 5.5affected

References