Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2017-11387: Trend Micro Control Manager 6.0 Allows Access to Sensitive Data
CVE-2017-11387 · published 9 years ago
Summary
If not properly authenticated, an attacker can access sensitive data in Trend Micro Control Manager 6.0, potentially revealing confidential information. This is a critical issue because it could lead to unauthorized access to sensitive data. To protect your system, apply the latest updates and ensure authentication is enforced for all functionality.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| trendmicro | control_manager |
6.0 cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:* |
Original advisory text
Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging level. Formerly ZDI...
Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging level. Formerly ZDI-CAN-4512.
References
- http://www.securityfocus.com/bid/100078
- http://www.securitytracker.com/id/1039049
- http://www.zerodayinitiative.com/advisories/ZDI-17-497 Third Party Advisory VDB Entry
- https://success.trendmicro.com/solution/1117722 Patch Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-200Information Exposure
Timeline
Published2 Aug 2017
Updated15 Oct 2026
First seen14 Mar 2026
Track software like this
Free during beta