The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Deep_security | Trendmicro | 10.0 (including) | 10.0 (including) |
| Deep_security | Trendmicro | 11.0 (including) | 11.0 (including) |
| Deep_security | Trendmicro | 12.0 (including) | 12.0 (including) |