CVE-2017-14097

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control2017-12-19 · remote · multiple

Impact

An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system.

Affected products

References

• NVD record
• CVE.org record
• http://www.securityfocus.com/bid/102275
• https://success.trendmicro.com/solution/1118992
• https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
• https://www.exploit-db.com/exploits/43388/
• http://www.securityfocus.com/bid/102275
• https://success.trendmicro.com/solution/1118992
• https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
• https://www.exploit-db.com/exploits/43388/