Leandro Barragan

**Name of the Vulnerable Software and Affected Versions** Quest KACE System Management Appliance version 8.0.318 **Description** The issue concerns the accessibility of the "/common/download agent installer.php" script by anonymous users, which can be exploited to execute arbitrary commands on the system. **Recommendations** For Quest KACE System Management Appliance version 8.0.318, restrict access to the "/common/download agent installer.php" script to prevent anonymous users from executing arbitrary commands.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** A SQL injection issue in the search configuration script could allow an attacker to execute SQL commands, potentially leading to the upload and execution of arbitrary code that may harm the target system. **Recommendations** For Trend Micro Email Encryption Gateway version 5.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** The issue is related to an XML external entity injection (XXE) vulnerability. This could allow an authenticated user to expose a normally protected configuration script. **Recommendations** For Trend Micro Email Encryption Gateway version 5.5, consider disabling the XML parsing functionality until a patch is available. Restrict access to the configuration script to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** A lack of cross-site request forgery (CSRF) protection could allow an attacker to submit authenticated requests to a user browsing an attacker-controlled domain. **Recommendations** For Trend Micro Email Encryption Gateway version 5.5, consider implementing CSRF protection mechanisms to prevent attackers from submitting authenticated requests on behalf of users. As a temporary workaround, restrict access to sensitive features that could be exploited through CSRF attacks until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** The issue allows an attacker to change the location of log files, which can be manipulated to execute arbitrary commands, potentially leading to command execution on a vulnerable system. **Recommendations** For Trend Micro Email Encryption Gateway version 5.5, consider restricting access to the log file configuration to prevent unauthorized changes until a fix is available. As a temporary workaround, monitor log file locations closely for any suspicious changes.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** The issue allows an attacker to inject arbitrary data, potentially leading to code execution on vulnerable systems. This is due to an arbitrary file write vulnerability. **Recommendations** For Trend Micro Email Encryption Gateway version 5.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** The issue is related to an unvalidated software update vulnerability. This could allow a man-in-the-middle attacker to tamper with an update file and inject their own content. **Recommendations** For Trend Micro Email Encryption Gateway version 5.5, consider validating software updates to prevent tampering. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** The issue allows an attacker to eavesdrop and tamper with certain types of update data due to an insecure update via HTTP. **Recommendations** For version 5.5, consider updating to a newer version that uses secure update protocols to prevent eavesdropping and tampering. As a temporary workaround, restrict access to update mechanisms to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** A SQL injection issue in the edit policy script of the Trend Micro Email Encryption Gateway could allow an attacker to execute SQL commands, potentially leading to the upload and execution of arbitrary code that may harm the target system. The vulnerability is related to the lack of protection for the SQL query structure in the editPolicy.jsp script. Exploitation of this issue may enable a remote attacker to execute arbitrary SQL queries using the `hidRuleId` parameter. **Recommendations** For Trend Micro Email Encryption Gateway version 5.5, consider restricting access to the editPolicy.jsp script and the `hidRuleId` parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the `hidRuleId` parameter in the affected script until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Email Encryption Gateway version 5.5 **Description** A SQL injection issue in the policy script of the Email Encryption Gateway could allow an attacker to execute arbitrary SQL commands, potentially uploading and executing malicious code that may harm the target system. The vulnerability is related to the lack of protection for the SQL query structure, which can be exploited by a remote attacker using the `hidEditld` parameter to execute arbitrary SQL queries. **Recommendations** For Trend Micro Email Encryption Gateway version 5.5, consider restricting access to the policy script to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the `hidEditld` parameter in the affected script until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server (Standalone) versions 3.2 and below Description: An issue exists where improper access control could allow an attacker to decrypt database contents, potentially accessing a vulnerable system. Recommendations: For versions 3.2 and below, update to a version above 3.2 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Smart Protection Server (Standalone) versions 3.2 and below **Description** A session hijacking issue via log disclosure could allow an unauthenticated attacker to hijack active user sessions, enabling them to perform authenticated requests on a vulnerable system. **Recommendations** For versions 3.2 and below, update to a version above 3.2 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server (Standalone) versions 3.2 and below Description: A vulnerability could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system. Recommendations: For versions 3.2 and below, update to a version above 3.2 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server (Standalone) versions 3.2 and below Description: A vulnerability could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system. Recommendations: For versions 3.2 and below, update to a version above 3.2 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server (Standalone) versions 3.2 and below Description: A stored cross site scripting (XSS) issue could allow an attacker to execute a malicious payload on vulnerable systems. Recommendations: For versions 3.2 and below, update to a version above 3.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Trend Micro ServerProtect for Linux version 3.0 before CP 1531 **Description** A cross-site request forgery (CSRF) issue allows remote attackers to hijack user authentication for requests to start an update from any source via a crafted request to "SProtectLinux/scanoption set.cgi". This is due to the lack of anti-CSRF tokens. **Recommendations** For Trend Micro ServerProtect for Linux version 3.0 before CP 1531, apply CP 1531 to resolve the issue. As a temporary workaround, consider restricting access to the "SProtectLinux/scanoption set.cgi" endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Kaspersky Anti-Virus for Linux File Server versions prior to 8.0.4.312 **Description** The issue is related to the absence of Anti-CSRF tokens in all forms on the web interface of Kaspersky Anti-Virus for Linux File Server. This could allow a remote attacker to send authenticated requests when an authenticated user views an attacker-controlled domain. **Recommendations** For versions prior to 8.0.4.312, update to version 8.0.4.312 or later, which includes Maintenance Pack 2 Critical Fix 4, to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Kaspersky Anti-Virus for Linux File Server versions prior to 8.0.4.312 **Description** The issue is related to the `reportId` parameter of the `getReportStatus` action method in the web interface, which can be exploited to read arbitrary files with `kluser` privileges. This is due to a lack of protection for service data. The exploitation of this issue may allow a remote attacker to read arbitrary files. **Recommendations** For versions prior to 8.0.4.312, update to version 8.0.4.312 or later to resolve the issue. As a temporary workaround, consider restricting access to the `getReportStatus` action method to minimize the risk of exploitation. Avoid using the `reportId` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Kaspersky Anti-Virus for Linux File Server versions prior to 8.0.4.312 **Description** The issue exists due to insufficient input validation during quarantine read and write operations in the kav4fs-control service. This can be exploited by a remote attacker with kluser privileges to elevate their privileges to root. **Recommendations** For versions prior to 8.0.4.312, update to version 8.0.4.312 or later to resolve the issue. As a temporary workaround, consider restricting access to the kav4fs-control binary to minimize the risk of exploitation.