CVE-2018-3609

ALTO 8.1CVE-2018-3609 · Published 16/02/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
interscan messaging security virtual appliance trendmicro	`= 9.0= 9.1`	No fix yet

Description

A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information in a particular log file that could be used to bypass authentication on vulnerable installations.

References

securityfocus.com/bid/103097 · Third Party Advisory
korelogic.com/Resources/Advisories/KL-001-2018-006.txt · Exploit
success.trendmicro.com/jp/solution/1119290 · Vendor Advisory
success.trendmicro.com/solution/1119277 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free