CVE-2015-3326

EPSS 0.39%
Veröffentlicht 14.05.2015 00:59:03
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force attack.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trend Micro ≫ Scanmail Version10.2 SwPlatformmicrosoft_exchange

Trend Micro ≫ Scanmail Version11.0 SwPlatformmicrosoft_exchange

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.39%	0.594

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://blog.malerisch.net/2016/05/trendmicro-smex-session-predictable-cve-2015-3326.html

http://esupport.trendmicro.com/solution/en-US/1109669.aspx

Vendor Advisory

http://www.securityfocus.com/bid/74661

http://www.securitytracker.com/id/1032323

https://nvd.nist.gov/vuln/detail/CVE-2015-3326

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-3326

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-3326

EUVD