5.5

CVE-2015-2873

Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct request to the (1) system log URL, (2) whitelist URL, or (3) blacklist URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trendmicro ≫ Deep Discovery Inspector Version 3.5 Lang ja
Trendmicro ≫ Deep Discovery Inspector Version 3.5 Lang zh
Trendmicro ≫ Deep Discovery Inspector Version 3.7 Lang ja
Trendmicro ≫ Deep Discovery Inspector Version 3.7 Lang zh
Trendmicro ≫ Deep Discovery Inspector Version 3.8 Lang ja
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.67% 0.838
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 8 4.9
AV:N/AC:L/Au:S/C:P/I:P/A:N
CWE-425 Direct Request ('Forced Browsing')

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

http://esupport.trendmicro.com/solution/en-US/1112206.aspx
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/248692
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/76396
Third Party Advisory
VDB Entry