<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>> Trend Micro Incorporated January 14, 2021 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) IM Security 1.6.5 - GM for English - Windows - 64 Bits Critical Patch - Build 2109 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ========================================================== 1. Overview of This Critical Patch Release 1.1 Issues 1.2 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ========================================================== 1. Overview of This Critical Patch Release ======================================================================== 1.1 Issues ===================================================================== This critical patch resolves the following issue: Issue 1: IM Security is affected by the Weak Session Token Authentication Bypass Vulnerability. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This critical patch resolves this vulnerability. 1.2 Files Included in This Release ===================================================================== A. Files for Current Issue --------------------------------------------------- Filename Build No. ------------------------------------------------ [IM Security] servPolicyController.dll 1.6.5.2109 B. Files for Previous Issues --------------------------------------------------- Not applicable. 2. Documentation Set ======================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com In addition to this Readme file, the documentation set for this product includes the following: - Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining IM Security. To access the Online Help, go to http://docs.trendmicro.com - Installation Guide (IG): The Installation Guide contains information on requirements and procedures for installing and deploying IM Security. - Administrator's Guide (AG): The Administrator's Guide contains an overview of features and key concepts, and information on configuring and maintaining IM Security. - Getting Started Guide (GSG): The Getting Started Guide contains product overview, installation planning, installation and configuration instructions, and basic information intended to get IM Security "up and running". - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. To access the Support Portal, go to https://success.trendmicro.com 3. System Requirements ======================================================================== 1. Trend Micro IM Security 1.6.5 每 GM - English - Windows - x64 4. Installation ======================================================================== This section explains key steps for installing the critical patch. 4.1 Installing ===================================================================== To install: 1. Copy the self-extracting file "imsecurity_165_win_en_criticalpatch2_b2109.zip" to a local folder. 2. Run the "imsecurity_165_win_en_criticalpatch2_b2109.exe" file. 3. In the setup screen, click "Install" and follow the on-screen instructions to complete the installation. The "Installation successful!" message appears after the system completes the installation. The following services restart automatically: * Trend Micro IM Security Server * Trend Micro IM Security System Attendant 4.2 Uninstalling ===================================================================== To roll back to the previous build: 1. Open the Registry Editor. 2. Click "Start > Run". 3. Type "REGEDIT" and press "Enter". 4. Take note of the "Backup Dir" value in the registry key: "\HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\IM Security\Hotfix\IM Security 1.6.5 Critical Patch 2\" A typical value would be: "C:\Program Files\Trend Micro\IM Security\HotFix\B-2109". 5. Run "Uninstall.bat" in the backup folder to start the rollback. The "Remove installation successful" message appears after the rollback completes. 6. Click "OK". The "Uninstallation success!" message appears after the system completes the uninstallation. 5. Post-Installation Configuration ======================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 6. Known Issues ======================================================================== There are no known issues for this critical patch release. 7. Release History ======================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ======================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. https://www.trendmicro.com/en_us/contact.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2021, Trend Micro Incorporated. All rights reserved. Trend Micro and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ======================================================================== View information about your license agreement with Trend Micro at: https://www.trendmicro.com/en_us/about/legal.html Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide