CVE-2017-11398 | BDVDB-2026-95548 Detail

Trend MicroTrend Micro Smart Protection Server (Standalone)

Description#

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-285 OTHER - Information Exposure Through Log Files (CWE-285)

References#

https://www.exploit-db.com/exploits/43388/
http://www.securityfocus.com/bid/102275
https://success.trendmicro.com/solution/1118992
https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities

Exploit#

https://www.exploit-db.com/exploits/43388/

History#

Version 12018-01-19Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.