A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.
Weakness
The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Serverprotect | Trendmicro | 5.8 (including) | 5.8 (including) |
| Serverprotect | Trendmicro | 6.0 (including) | 6.0 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/127.html
- https://cwe.mitre.org/data/definitions/143.html
- https://cwe.mitre.org/data/definitions/144.html
- https://cwe.mitre.org/data/definitions/668.html
- https://cwe.mitre.org/data/definitions/87.html
References
- https://success.trendmicro.com/jp/solution/000289030
- https://success.trendmicro.com/solution/000289038
- https://www.zerodayinitiative.com/advisories/ZDI-21-1115/
- https://success.trendmicro.com/jp/solution/000289030
- https://success.trendmicro.com/solution/000289038
- https://www.zerodayinitiative.com/advisories/ZDI-21-1115/