PT-2017-13242
CVE-2017-14085
·
Published
2017-10-05
·
Updated
2018-10-09
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Trend Micro OfficeScan versions 11.0 and XG
Description
The issue allows unauthenticated users who can access the OfficeScan server to disclose sensitive information, including querying the network's NT domain or the PHP version and modules.
Recommendations
For Trend Micro OfficeScan version 11.0, update to a version that addresses this issue.
For Trend Micro OfficeScan version XG, update to a version that addresses this issue.
As a temporary workaround, consider restricting access to the OfficeScan server to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾