Trend Micro Control Manager Remote SQL Injection Vulnerability
Publish Date: 21 juillet 2015
Gravité: : Élevé
Date du conseil: 21 juillet 2015
Description
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Information Exposure Rating:
Apply associated Trend Micro DPI Rules.
Solutions
Trend Micro Deep Security DPI Rule Number: 1000608
Trend Micro Deep Security DPI Rule Name: 1000608 - Generic SQL Injection Prevention
Affected software and version:
- trend_micro control_manager 2.0
- trend_micro control_manager 2.1
- trend_micro control_manager 2.5
- trend_micro control_manager 3.0
- trend_micro control_manager 3.5
- trend_micro control_manager 5.0
- trend_micro control_manager 5.5
- trend_micro control_manager 6.0