Trend Micro Control Manager Multiple Security Vulnerabilities
BID:100078
Info
Trend Micro Control Manager Multiple Security Vulnerabilities
| Bugtraq ID: | 100078 |
| Class: | Unknown |
| CVE: |
CVE-2017-11383 CVE-2017-11384 CVE-2017-11385 CVE-2017-11386 CVE-2017-11387 CVE-2017-11388 CVE-2017-11389 CVE-2017-11390 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 31 2017 12:00AM |
| Updated: | Jul 31 2017 12:00AM |
| Credit: | rgod,vftable. |
| Vulnerable: |
Trend Micro Control Manager 6.0 |
| Not Vulnerable: |
Trend Micro Control Manager 6.0 SP3 Patch 3 |
Discussion
Trend Micro Control Manager Multiple Security Vulnerabilities
Trend Micro Control Manager is prone to the following multiple security vulnerabilities:
1. Multiple SQL-injection vulnerabilities
2. A directory-traversal vulnerability
3. An authentication-bypass vulnerability
4. An XML-external entity vulnerability
Exploiting these issues could allow an attacker to access or modify data, or exploit latent vulnerabilities in the underlying database, bypass authentication mechanism, execute arbitrary code and obtain sensitive information. This may aid in further attacks.
Trend Micro Control Manager 6.0 is vulnerable.
Trend Micro Control Manager is prone to the following multiple security vulnerabilities:
1. Multiple SQL-injection vulnerabilities
2. A directory-traversal vulnerability
3. An authentication-bypass vulnerability
4. An XML-external entity vulnerability
Exploiting these issues could allow an attacker to access or modify data, or exploit latent vulnerabilities in the underlying database, bypass authentication mechanism, execute arbitrary code and obtain sensitive information. This may aid in further attacks.
Trend Micro Control Manager 6.0 is vulnerable.
Solution / Fix
Trend Micro Control Manager Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.