Mageni Mageni Security LLC

Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Trend Micro Web Management Authentication Bypass Vulnerability

Information

Severity

Severity

High

Family

Family

Privilege escalation

CVSSv2 Base

CVSSv2 Base

7.5

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Solution Type

Solution Type

Vendor Patch

Created

Created

15 years ago

Modified

Modified

5 years ago

Share

Summary

This Remote host is installed with Trend Micro OfficeScan, which is prone to Authentication Bypass Vulnerability.

Insight

Insight

The flaw is due to insufficient entropy in a random session token used to identify an authenticated manager using the web console.

Affected Software

Affected Software

Trend Micro Client Server Messaging Security (CSM) versions 3.5 and 3.6 Trend Micro OfficeScan Corporate Edition versions 7.0 and 7.3 Trend Micro OfficeScan Corporate Edition version 8.0 Trend Micro Worry-Free Business Security (WFBS) version 5.0

Solution

Solution

Partially Fixed. Fix is available for Trend Micro OfficeScan 8.0 and Worry-Free Business Security 5.0.

Common Vulnerabilities and Exposures (CVE)

References