CVE-2008-2433

🗓️ 27 Aug 2008 20:00:00Reported by flexeraType

The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, making it easier for remote attackers to hijack sessions

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2008-2433	27 Aug 200820:00	–	cve
NVD	CVE-2008-2433	27 Aug 200820:41	–	nvd
OpenVAS	Trend Micro Web Management Authentication Bypass Vulnerability	27 Aug 200800:00	–	openvas
OpenVAS	Trend Micro Web Management Authentication Bypass Vulnerability	27 Aug 200800:00	–	openvas
Prion	Design/Logic Flaw	27 Aug 200820:41	–	prion
Positive Technologies	PT-2008-3901 · Trend Micro · Trend Micro Officescan +3	27 Aug 200800:00	–	ptsecurity
securityvulns	Secunia Research: Trend Micro Products Web Management Authentication Bypass	25 Aug 200800:00	–	securityvulns
securityvulns	Trend Micro multiple application authentication bypass	25 Aug 200800:00	–	securityvulns
seebug.org	趋势科技OfficeScan Web管理绕过认证漏洞	26 Aug 200800:00	–	seebug
Tenable Nessus	Trend Micro Multiple Products Token Prediction Security Bypass	27 Aug 200800:00	–	nessus

Source	Link
trendmicro	www.trendmicro.com/ftp/documentation/readme/Readme_WFBS5%200_EN_CriticalPatch1404.txt
secunia	www.secunia.com/secunia_research/2008-31/advisory/
vupen	www.vupen.com/english/advisories/2008/2421
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/44597
securitytracker	www.securitytracker.com/id
trendmicro	www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2402_readme.txt
securityreason	www.securityreason.com/securityalert/4191
securityfocus	www.securityfocus.com/archive/1/495670/100/0/threaded
secunia	www.secunia.com/advisories/31373
securityfocus	www.securityfocus.com/bid/30792

11 Oct 2018 19:57Current

9.7High risk

Vulners AI Score9.7

EPSS0.12313