CVE-2017-9035

概要

参考情報

• packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html · Exploit
• seclists.org/fulldisclosure/2017/May/91 · Exploit
• securitytracker.com/id/1038548 · Third Party Advisory
• success.trendmicro.com/solution/1117411 · Patch
• coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities · Exploit

serverprotect のその他の脆弱性

• CVE-2022-25331高 7.5Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash …
• CVE-2022-25330緊急 9.8Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the pr…
• CVE-2022-25329緊急 9.8Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in …
• CVE-2021-36745緊急 9.8A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers …
• CVE-2021-25252中 5.5Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may l…