PT-2016-5898 · Trend Micro · Trend Micro Email Encryption Gateway

Publicado 2016-04-28 · Atualizado 2021-09-09 · CVE-2016-4351

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway versions prior to 5.5 build 1107

Description The issue concerns a SQL injection vulnerability in the authentication functionality. This allows remote attackers to execute arbitrary SQL commands.

Recommendations For versions prior to 5.5 build 1107, update to build 1107 or later to resolve the issue.

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2016-4351

ZDI-16-248

Produtos afetados

Trend Micro Email Encryption Gateway

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-4351 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-16-248 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-16-248 · Nota
• https://osv.dev/vulnerability/CVE-2016-4351 · Aviso do Fabricante
• https://esupport.trendmicro.com/solution/en-US/1114060.aspx · Aviso do Fabricante