| Package | Affected versions | Patched versions |
|---|---|---|
| threat discovery appliance | ≤ 2.6.1062 |
admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the timezone parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free