Trend Micro Endpoint Application Control Directory Traversal Vulnerability

Trend Micro Endpoint Application Control is a set of endpoint application control software from Trend Micro. The software can prohibit unknown applications from running on the terminal. A directory traversal vulnerability exists in the FileDrop servlet in Trend Micro Endpoint Application Control...

Directory traversal

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability...

CVE-2018-10357

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability...

CVE-2018-10357

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability...

CVE-2018-10357

Trend Micro Endpoint Application Control 2.0 contains a directory traversal vulnerability in the FileDrop servlet that can allow a remote attacker to execute arbitrary code. Multiple sources (including ZDI-18-469 and CNVD/NVD variants) describe that authentication is required to exploit, and the ...

CVE-2018-10357

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability...

Trend Micro Endpoint Application Control FileDrop Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Endpoint Application Control. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileDrop servlet. When parsing filenames, the process does no...