CVE-2017-11398

🗓️ 19 Jan 2018 19:00:00Reported by trendmicroType

A session hijacking vulnerability in Trend Micro Smart Protection Serve

Reporter	Title	Published	Views	Family All 14
0day.today	Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure Vulnerabilities	22 Dec 201700:00	–	zdt
CNVD	Trend Micro Smart Protection Server Local Information Disclosure Vulnerability	22 Dec 201700:00	–	cnvd
Core Security	Trend Micro Smart Protection Server Multiple Vulnerabilities	19 Dec 201700:00	–	coresecurity
Cvelist	CVE-2017-11398	19 Jan 201819:00	–	cvelist
Dsquare	Trend Micro Smart Protection Server Encryption Key Disclosure	10 Mar 201800:00	–	dsquare
Exploit DB	Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control	19 Dec 201700:00	–	exploitdb
EUVD	EUVD-2017-3025	7 Oct 202500:30	–	euvd
exploitpack	Trend Micro Smart Protection Server - Session Hijacking Log File Disclosure Remote Command Execution Cron Job Injection Local File Inclusion Stored Cross-Site Scripting Improper Access Control	19 Dec 201700:00	–	exploitpack
NVD	CVE-2017-11398	19 Jan 201819:29	–	nvd
OpenVAS	Trend Micro Smart Protection Server <= 3.3 Multiple Vulnerabilities	23 Jan 201800:00	–	openvas

NVD

Node

trendmicro smart_protection_serverRange≤3.2

[
  {
    "product": "Trend Micro Smart Protection Server (Standalone)",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "3.0, 3.1, 3.2"
      }
    ]
  }
]

Source	Link
coresecurity	www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
securityfocus	www.securityfocus.com/bid/102275
success	www.success.trendmicro.com/solution/1118992
exploit-db	www.exploit-db.com/exploits/43388/

21 Nov 2024 03:07Current

8.8High risk

Vulners AI Score8.8

CVSS 26.8

CVSS 38.8

EPSS0.05352