Trend Micro Deep Discovery Director CVE-2017-11380 Security Bypass Vulnerability

Bugtraq ID:	100314
Class:	Design Error
CVE:	CVE-2017-11380
Remote:	Yes
Local:	No
Published:	Aug 01 2017 12:00AM
Updated:	Aug 01 2017 12:00AM
Credit:	Maximiliano Vidal of Core Security Consulting Services.
Vulnerable:	Trend Micro Deep Discovery Director 1.1
Not Vulnerable:	Trend Micro Deep Discovery Director 1.1 (Build 1249)

Trend Micro Deep Discovery Director CVE-2017-11380 Security Bypass Vulnerability

Trend Micro Deep Discovery Director is prone to a security-bypass vulnerability.

Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks.

Trend Micro Deep Discovery Director 1.1 is vulnerable; other versions may also be affected.

Trend Micro Deep Discovery Director CVE-2017-11380 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Trend Micro Deep Discovery Director CVE-2017-11380 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Trend Micro Deep Discovery Director CVE-2017-11380 Security Bypass Vulnerability

References:

• CORE-2017-0005: Trend Micro Deep Discovery Director Multiple Vulnerabilities (Core Security)
  
• Trend Micro Homepage (Trend Micro)
  
• SECURITY BULLETIN: Trend Micro Deep Discovery Director 1.1 Multiple Vulnerabilit (Trend Micro)