PT-2018-17420 · Trend Micro · Trend Micro Email Encryption Gateway

Leandro Barragan + 1 · Publicado 2018-03-15 · Atualizado 2019-10-03 · CVE-2018-6222

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5

Description The issue allows an attacker to change the location of log files, which can be manipulated to execute arbitrary commands, potentially leading to command execution on a vulnerable system.

Recommendations For Trend Micro Email Encryption Gateway version 5.5, consider restricting access to the log file configuration to prevent unauthorized changes until a fix is available. As a temporary workaround, monitor log file locations closely for any suspicious changes.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-6222

Produtos afetados

Trend Micro Email Encryption Gateway

Referências · 5

• 🔥 https://coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/44166 · Exploit
• https://success.trendmicro.com/solution/1119349 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-6222 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6222 · Nota de Segurança