Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-7552
HistoryApr 12, 2017 - 10:59 a.m.

CVE-2016-7552

2017-04-1210:59:00
CWE-22
[email protected]
web.nvd.nist.gov
60
4
cve-2016-7552
trend micro
threat discovery appliance
directory traversal
session_id
vulnerability
remote attacker
unauthenticated
authentication bypass
dos

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.967 High

EPSS

Percentile

99.7%

JSON

On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.

Affected configurations

NVD
Node
trendmicrothreat_discovery_applianceMatch2.6.1062r1

Social References

More

Related

packetstorm 4
seebug 6
checkpoint_advisories 1
nuclei 1
nvd 1
zdt 1
prion 1
cvelist 1
metasploit 1
packetstorm
packetstorm
Trend Micro Threat Discovery Appliance 2.6.1062r1 logoff.cgi Directory Traversal
2017-04-20 00:00:00
Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution
2017-04-19 00:00:00
Trend Micro Threat Discovery Appliance 2.6.1062r1 log_query_dae.cgi Remote Code Execution
2017-04-20 00:00:00
seebug
seebug
Trend Micro Threat Discovery Appliance <= 2.6.1062r1 logoff.cgi Directory Traversal Authentication Bypass Vulnerability（CVE-2016-7552）
2017-04-21 00:00:00
Trend Micro Threat Discovery Appliance <= 2.6.1062r1 log_query_dlp.cgi Command Injection Remote Code Execution Vulnerability (CVE-2016-8590)
2017-04-21 00:00:00
Trend Micro Threat Discovery Appliance <= 2.6.1062r1 log_query_dae.cgi Command Injection Remote Code Execution Vulnerability (CVE-2016-8589)
2017-04-21 00:00:00
checkpoint_advisories
checkpoint_advisories
Trendmicro Threat Discovery Appliance Directory Traversal (CVE-2016-7552)
2020-12-22 00:00:00
nuclei
nuclei
Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass
2021-02-23 21:19:32
nvd
nvd
CVE-2016-7552
2017-04-12 10:59:00
zdt
zdt
Trend Micro Threat Discovery Appliance 2.6.1062r1 logoff.cgi Directory Traversal Exploit
2017-04-20 00:00:00
prion
prion
Directory traversal
2017-04-12 10:59:00
cvelist
cvelist
CVE-2016-7552
2017-04-12 10:00:00
metasploit
metasploit
Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution
2017-04-10 18:32:58

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.967 High

EPSS

Percentile

99.7%

JSON
Related for CVE-2016-7552
packetstorm4seebug6checkpoint_advisories1nuclei1nvd1zdt1prion1cvelist1metasploit1