PT-2017-13242

CVE-2017-14085

·

Publicado

2017-10-05

·

Atualizado

2018-10-09

Descrição por

CVSS 3.1
5.3
Média
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 11.0 and XG
Description The issue allows unauthenticated users who can access the OfficeScan server to disclose sensitive information, including querying the network's NT domain or the PHP version and modules.
Recommendations For Trend Micro OfficeScan version 11.0, update to a version that addresses this issue. For Trend Micro OfficeScan version XG, update to a version that addresses this issue. As a temporary workaround, consider restricting access to the OfficeScan server to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾