9.1crit
CVE-2016-6269
Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 b…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.1
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
3.7%
percentile 90%
Public exploits
0
none known
Summary
Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete arbitrary files via the tmpfname parameter to (1) log_mgt_adhocquery_ajaxhandler.php, (2) log_mgt_ajaxhandler.php, (3) log_mgt_ajaxhandler.php or (4) tf parameter to wcs_bwlists_handler.php.
Exploit prediction (EPSS)
3.72% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
- qkaiser.github.io /pentesting/trendmicro/2016/08/08/trendmicro-sps/ · x_refsource_MISC, x_transferred
- success.trendmicro.com /solution/1114913 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-6269
- NVD: CVE-2016-6269
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.