PT-2017-13242

CVE-2017-14085

·

Published

2017-10-05

·

Updated

2018-10-09

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 11.0 and XG
Description The issue allows unauthenticated users who can access the OfficeScan server to disclose sensitive information, including querying the network's NT domain or the PHP version and modules.
Recommendations For Trend Micro OfficeScan version 11.0, update to a version that addresses this issue. For Trend Micro OfficeScan version XG, update to a version that addresses this issue. As a temporary workaround, consider restricting access to the OfficeScan server to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾