CVE-2018-3600

The CVE-2018-3600 issue affects Trend Micro Control Manager 6.0, with an XXE flaw in the AdHocQuery_Processor that allows remote disclosure of sensitive information. The root cause is improper XML External Entity handling, enabling an attacker to read contents via a crafted URI and inject it back...