Описание
A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.
Ссылки
- PatchVendor Advisory
- https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilitiesThird Party Advisory
- PatchVendor Advisory
- https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilitiesThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:trendmicro:deep_discovery_director:1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.18473
Средний
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.
EPSS
Процентиль: 95%
0.18473
Средний
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-78