PT-2017-11980 · Trend Micro · Trend Micro Web Security Virtual Appliance

Publicado 2017-09-22 · Atualizado 2020-08-19 · CVE-2017-11396

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Web Security Virtual Appliance version 6.5

Description The issue concerns the web service inspection of input parameters, potentially allowing attackers with administration rights to the console to implement remote code injections.

Recommendations For Trend Micro Web Security Virtual Appliance version 6.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-11396

Produtos afetados

Trend Micro Web Security Virtual Appliance

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-11396 · Nota de Segurança
• https://success.trendmicro.com/solution/1117412 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-11396 · Aviso do Fabricante