Design/Logic Flaw

2015-08-2315:59:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

48.8%

JSON

Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct request to the (1) system log URL, (2) whitelist URL, or (3) blacklist URL.

CPENameOperatorVersion
deep_discovery_inspectoreq3.5
deep_discovery_inspectoreq3.5
deep_discovery_inspectoreq3.5
deep_discovery_inspectoreq3.6
deep_discovery_inspectoreq3.7
deep_discovery_inspectoreq3.7
deep_discovery_inspectoreq3.7
deep_discovery_inspectoreq3.8
deep_discovery_inspectoreq3.8

Name	Operator	Version
deep_discovery_inspector	eq	3.5
deep_discovery_inspector	eq	3.5
deep_discovery_inspector	eq	3.5
deep_discovery_inspector	eq	3.6
deep_discovery_inspector	eq	3.7
deep_discovery_inspector	eq	3.7
deep_discovery_inspector	eq	3.7
deep_discovery_inspector	eq	3.8
deep_discovery_inspector	eq	3.8