PT-2017-11976 · Trend Micro · Trend Micro Control Manager

Publicado 2017-07-31 · Atualizado 2017-08-04 · CVE-2017-11390

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager version 6.0

Description The issue is related to XML external entity (XXE) processing, which could lead to information disclosure if exploited.

Recommendations For Trend Micro Control Manager version 6.0, update to a version that fixes the XML external entity processing vulnerability to prevent information disclosure.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2017-11390

ZDI-17-501

Produtos afetados

Trend Micro Control Manager

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-11390 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11390 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-17-501 · Nota de Segurança
• https://success.trendmicro.com/solution/1117722 · Aviso do Fabricante
• http://securityfocus.com/bid/100078 · Nota
• http://zerodayinitiative.com/advisories/ZDI-17-501 · Nota