CVE-2016-8584

Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by guessing the value.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-04-28

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Threat Discovery Appliance (Trendmicro)

References

• http://packetstormsecurity.com/files/142227/Trend-Micro-Threat-Discovery-Appliance-2.6.1062r1-Session-Generation-Authen…
• http://www.securityfocus.com/bid/98333