What’s Vulnerable › Vulnerabilities

CVE-2019-19696

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-18 · updated 2026-06-17
• Weakness: CWE-522

Description

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.

Affected products

• Trend Micro Password Manager: from 5.0 through 5.0.0.1076; from 5.0 through 5.0.1047

References

• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspx
• https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1124091.aspx
• https://jvn.jp/en/jp/JVN37183636/index.html
• https://jvn.jp/jp/JVN37183636/index.html
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspx
• https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1124091.aspx
• https://jvn.jp/en/jp/JVN37183636/index.html
• https://jvn.jp/jp/JVN37183636/index.html

Get alerted when CVE-2019-19696 or the next vulnerability affects your stack