Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Trend Micro OfficeScan CGI目录权限不正确漏洞
Vulnerability Description
Trend Micro OfficeScan是美国趋势科技（Trend Micro）公司的一套分布式反病毒软件。安装过程中会提示是否采用WEB管理方式。如果选择采用WEB管理方式，OfficeScan客户端将侦听12345/TCP端口，用于定期接收病毒数据库更新或者来自OfficeScan管理端的命令。 Trend Micro OfficeScan安装的CGI目录权限设置不正确，远程攻击者可以利用这个漏洞访问CGI目录外的程序。 目前没有获得详细漏洞细节。
CVSS Information
N/A
Vulnerability Type
N/A