CVE-2017-11387

Description

Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging level. Formerly ZDI-CAN-4512.

References

https://success.trendmicro.com/solution/1117722

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3014

http://www.zerodayinitiative.com/advisories/ZDI-17-497

http://www.securitytracker.com/id/1039049

http://www.securityfocus.com/bid/100078

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS