PT-2017-11965 · Trend Micro · Trend Micro Deep Discovery Inspector

Publicado 2017-08-01 · Atualizado 2017-08-07 · CVE-2017-11379

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Director version 1.1

Description The issue concerns the lack of validation and signing of configuration and database backup archives.

Recommendations For Trend Micro Deep Discovery Director version 1.1, consider implementing additional validation and signing mechanisms for configuration and database backup archives to ensure their integrity. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

CVE-2017-11379

Produtos afetados

Trend Micro Deep Discovery Inspector

Referências · 4

• https://success.trendmicro.com/solution/1117663 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11379 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11379 · Aviso do Fabricante
• https://coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities · Nota