Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
trendmicro serverprotect 5.8 |
||
trendmicro serverprotect for network appliance filer 5.8 |
||
trendmicro serverprotect_for_storage 6.0 |
Vulmon