CVE-2016-7552 On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can....
CriticalCVSS 9.8
EPSS 93.2%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro threat discovery appliance | = 2.6.1062-r1 | No fix listed |
References
- 97599 third-party-advisory vdb-entry
- github.com exploit third-party-advisory