Trend Micro ServerProtect for Linux CVE-2017-9037 Multiple Cross Site Scripting Vulnerabilities
BID:98627
Info
Trend Micro ServerProtect for Linux CVE-2017-9037 Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 98627 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-9037 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2017 12:00AM |
| Updated: | May 23 2017 12:00AM |
| Credit: | Leandro Barragan and Maximiliano Vidal from Core Security Consulting Services |
| Vulnerable: |
Trend Micro ServerProtect for Linux 3.0 |
| Not Vulnerable: |
Trend Micro ServerProtect for Linux 3.0 CP 1531 |
Exploit / POC
Trend Micro ServerProtect for Linux CVE-2017-9037 Multiple Cross Site Scripting Vulnerabilities
To exploit this issue an attacker must entice an unsuspecting victim to follow a malicious URI.
Core Security Technologies has created a proof-of-concept to demonstrate these issues. Please see the references for more information.
To exploit this issue an attacker must entice an unsuspecting victim to follow a malicious URI.
Core Security Technologies has created a proof-of-concept to demonstrate these issues. Please see the references for more information.
References
Trend Micro ServerProtect for Linux CVE-2017-9037 Multiple Cross Site Scripting Vulnerabilities
References:
References:
- Trend Micro Homepage (Trend Micro)
- CORE-2017-0002 Trend Micro ServerProtect Multiple Vulnerabilities (Core Security)
- SECURITY BULLETIN: Trend Micro ServerProtect for Linux 3.0 Multiple Vulnerabilit (Trend Micro)