CVE-2017-5481

Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a web-console operation.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-05-03

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Officescan (Trendmicro)

References

• http://www.securityfocus.com/bid/98007
• https://success.trendmicro.com/solution/1117204