Publish CVE-2019-9488 from Trend Micro

CVE-2019-9488 Publish from Trend Micro

2019/9xxx/CVE-2019-9488.json

@@ -1,8 +1,31 @@
 {
 	"CVE_data_meta" : {
-        "ASSIGNER": "cve@mitre.org",
+		"ASSIGNER" : "security@trendmicro.com",
 		"ID" : "CVE-2019-9488",
-        "STATE": "RESERVED"
+		"STATE" : "PUBLIC"
+	},
+	"affects" : {
+		"vendor" : {
+			"vendor_data" : [
+				{
+					"product" : {
+						"product_data" : [
+							{
+								"product_name" : "Trend Micro Deep Security, Trend Micro Vulnerability Protection",
+								"version" : {
+									"version_data" : [
+										{
+											"version_value" : "Deep Security 10.x, 11.x;  Vulnerability Protection 2.0"
+										}
+									]
+								}
+							}
+						]
+					},
+					"vendor_name" : "Trend Micro"
+				}
+			]
+		}
 	},
 	"data_format" : "MITRE",
 	"data_type" : "CVE",
@@ -11,7 +34,26 @@
 		"description_data" : [
 			{
 				"lang" : "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+				"value" : "Trend Micro Deep Security Manager (10.x, 11.x)  and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack.  However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).  "
+			}
+		]
+	},
+	"problemtype" : {
+		"problemtype_data" : [
+			{
+				"description" : [
+					{
+						"lang" : "eng",
+						"value" : "XXE Attack"
+					}
+				]
+			}
+		]
+	},
+	"references" : {
+		"reference_data" : [
+			{
+				"url" : "https://success.trendmicro.com/solution/1122900"
 			}
 		]
 	}