CVE-2015-2873

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Inspector (DDI) versions prior to 3.5.1477 Trend Micro Deep Discovery Inspector (DDI) versions 3.6.x prior to 3.6.1217 Trend Micro Deep Discovery Inspector (DDI) versions 3.7.x prior to 3.7.1248 Trend Micro Deep Discovery Inspector (DDI) versions 3.8.x prior to 3.8.1263

Description The issue allows remote attackers to obtain sensitive information or change the configuration via a direct request to specific URLs, including the system log URL, whitelist URL, or blacklist URL.

Recommendations For versions prior to 3.5.1477, update to version 3.5.1477 or later. For versions 3.6.x prior to 3.6.1217, update to version 3.6.1217 or later. For versions 3.7.x prior to 3.7.1248, update to version 3.7.1248 or later. For versions 3.8.x prior to 3.8.1263, update to version 3.8.1263 or later.