ZeroHour

CVE-2018-3609

PoC
CVSS 3.0
8.1 high
EPSS
21%p97
Published
()
Modified
Description

A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information in a particular log file that could be used to bypass authentication on vulnerable installations.

Vendors
trendmicro
Products
interscan messaging security virtual appliance
Weakness
CWE-522, CWE-532
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.