CVE-2017-11398CWE-285

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated…

published January 19, 2018

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08195 · 94.9th percentile
Weakness
CWE-285 · Improper Authorization
Published
2018-01-19T19:00Z
EPSS history
Timeline
  • 19 JAN 19:00Z
    A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated…
    cvelistv5