CVE-2017-14097

🗓️ 19 Jan 2018 19:00:00Reported by trendmicroType

Improper access control in Trend Micro Smart Protection Server (Standalone) v3.2 & below allows decryption of database contents, leading to potential system access

Reporter	Title	Published	Views	Family All 10
0day.today	Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure Vulnerabilities	22 Dec 201700:00	–	zdt
CNVD	Trend Micro Smart Protection Server Incorrect Access Control Vulnerability	22 Dec 201700:00	–	cnvd
Core Security	Trend Micro Smart Protection Server Multiple Vulnerabilities	19 Dec 201700:00	–	coresecurity
Cvelist	CVE-2017-14097	19 Jan 201819:00	–	cvelist
Exploit DB	Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control	19 Dec 201700:00	–	exploitdb
exploitpack	Trend Micro Smart Protection Server - Session Hijacking Log File Disclosure Remote Command Execution Cron Job Injection Local File Inclusion Stored Cross-Site Scripting Improper Access Control	19 Dec 201700:00	–	exploitpack
NVD	CVE-2017-14097	19 Jan 201819:29	–	nvd
OSV	CVE-2017-14097	19 Jan 201819:29	–	osv
Packet Storm	Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure	22 Dec 201700:00	–	packetstorm
Prion	Improper access control	19 Jan 201819:29	–	prion

NVD

Node

trendmicro smart_protection_serverRange≤3.2

[
  {
    "product": "Trend Micro Smart Protection Server (Standalone)",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "3.0, 3.1, 3.2"
      }
    ]
  }
]

Source	Link
coresecurity	www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
securityfocus	www.securityfocus.com/bid/102275
success	www.success.trendmicro.com/solution/1118992
exploit-db	www.exploit-db.com/exploits/43388/

21 Nov 2024 03:12Current

9High risk

Vulners AI Score9

CVSS 25

CVSS 39.8

EPSS0.16249