CVE-2016-7552: Trend Micro Threat Discovery Appliance 2.6.1062r1 – Authentication Bypass

CVE-2016-7552: Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享
CVE-2016-7552: Trend Micro Threat Discovery Appliance 2.6.1062r1 – Authentication Bypass
此内容为付费阅读,请付费后查看
100积分
付费阅读

漏洞标题

CVE-2016-7552: Trend Micro Threat Discovery AppliaNCe 2.6.1062r1 – Authentication Bypass

漏洞描述

Trend Micro Threat Discovery Appliance 2.6.1062r1 is vulnerable to a directory traversal vulnerability when processing a session_id cookie, which allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.

PoC代码

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享