PT-2017-13242
CVE-2017-14085
·
تاريخ النشر
2017-10-05
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Trend Micro OfficeScan versions 11.0 and XG
Description
The issue allows unauthenticated users who can access the OfficeScan server to disclose sensitive information, including querying the network's NT domain or the PHP version and modules.
Recommendations
For Trend Micro OfficeScan version 11.0, update to a version that addresses this issue.
For Trend Micro OfficeScan version XG, update to a version that addresses this issue.
As a temporary workaround, consider restricting access to the OfficeScan server to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾