Описание
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2022-26871
- https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
- https://jvn.jp/vu/JVNVU99107357
- https://success.trendmicro.com/jp/solution/000290660
- https://success.trendmicro.com/solution/000290678
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26871
- https://www.jpcert.or.jp/english/at/2022/at220008.html
Связанные уязвимости
CVSS3: 9.8
nvd
почти 4 года назад
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
CVSS3: 8.6
fstec
почти 4 года назад
Уязвимость средства мониторинга и управления безопасностью Trend Micro Apex Central связана с неограниченной загрузкой файлов опасного типа, позволяющая нарушителю выполнить произвольный код