PT-2017-11965 · Trend Micro · Trend Micro Deep Discovery Inspector

Published 2017-08-01 · Updated 2017-08-07 · CVE-2017-11379

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Director version 1.1

Description The issue concerns the lack of validation and signing of configuration and database backup archives.

Recommendations For Trend Micro Deep Discovery Director version 1.1, consider implementing additional validation and signing mechanisms for configuration and database backup archives to ensure their integrity. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2017-11379

Affected Products

Trend Micro Deep Discovery Inspector

References · 4

• https://success.trendmicro.com/solution/1117663 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11379 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11379 · Vendor Advisory
• https://coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities · Note