CVE-2018-10357: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability...

PT-2018-9843

Name of the Vulnerable Software and Affected Versions: Trend Micro Endpoint Application Control version 2.0 Description: A directory traversal issue exists due to a flaw in the FileDrop servlet, allowing a remote attacker to execute arbitrary code on vulnerable installations. Authentication is...