CVE-2016-8584 Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by guessing the value.
CriticalCVSS 9.8
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by guessing the value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro threat discovery appliance | <= 2.6.1062 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 98333 third-party-advisory vdb-entry