CVE-2018-10357

Опубликовано: 23 мая 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Высокий

Описание

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability.

Ссылки

http://www.securityfocus.com/bid/104355
Third Party Advisory
VDB Entry
https://success.trendmicro.com/solution/1119811
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-469/
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/104355
Third Party Advisory
VDB Entry
https://success.trendmicro.com/solution/1119811
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-469/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:trendmicro:endpoint_application_control:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.70238

Высокий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-m543-4vm2-fwm8