PT-2017-11966 · Trend Micro · Trend Micro Deep Discovery Inspector

Publicado 2017-08-01 · Atualizado 2017-08-07 · CVE-2017-11380

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Director version 1.1

Description The issue concerns the use of a static password for encrypting backup archives across different installations of the software. This suggests that the same password may be used in all virtual appliance instances, potentially affecting multiple devices.

Recommendations For Trend Micro Deep Discovery Director version 1.1, consider changing the static password used for backup archive encryption to a unique password for each installation to minimize the risk of unauthorized access.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-11380

Produtos afetados

Trend Micro Deep Discovery Inspector

Referências · 4

• https://success.trendmicro.com/solution/1117663 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11380 · Nota de Segurança
• https://coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities · Nota
• https://osv.dev/vulnerability/CVE-2017-11380 · Aviso do Fabricante