CVE-2016-1223

Опубликовано: 19 июн. 2016

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors.

Ссылки

http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx
Vendor Advisory
http://jvn.jp/en/jp/JVN48847535/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000074
Third Party Advisory
VDB Entry
Vendor Advisory
http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx
Vendor Advisory
http://jvn.jp/en/jp/JVN48847535/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000074
Third Party Advisory
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:worry-free_business_security:9.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:worry-free_business_security_services:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01681

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-558w-72f6-cp4j