CVEvulnerability
CVE-2015-2873
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-08-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-425
Description
Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct request to the (1) system log URL, (2) whitelist URL, or (3) blacklist URL.
Affected configurations
• trendmicro deep discovery inspector 3.5
• trendmicro deep discovery inspector 3.6
• trendmicro deep discovery inspector 3.7
• trendmicro deep discovery inspector 3.8
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- http://esupport.trendmicro.com/solution/en-US/1112206.aspx Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/248692 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/76396 Third Party Advisory, VDB Entry
- http://esupport.trendmicro.com/solution/en-US/1112206.aspx Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/248692 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/76396 Third Party Advisory, VDB Entry