Bug in Trend Micro’s DLP

Hemiptera! Hemiptera! We found a BUG!!!

Trend Micro’s Data Loss Prevention solution has a bug which would allow clients to attach files through its Gmail Drag-n-Drop functionality.

While deploying the solution, We tested all the possible ways in which files can be attached and sent over the network. Trend Micro’s DLP blocked everything except for the files attached via Drag-n-Drop functionality.

We even had a talk with the Development team of the Trend Micro’s DLP and they heard about this problem for the first time!!! So here’s one feather in Kavatch’s cap 😉

SCREENSHOTS:

Uploading File through Gmail's Drag-n-Drop Functionality

Uploading File through Gmail's Drag-n-Drop Functionality

File Uploaded bypassing the Trend Micro's DLP

File Uploaded bypassing the Trend Micro's DLP

Advertisements
Posted in kavatch. 1 Comment »

One Response to “Bug in Trend Micro’s DLP”

  1. Gautam Says:

    So much so for companies that supposedly pour millions of dollars into R & D!!!


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: