Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Trend Micro ServerProtect for Linux Web界面绕过访问认证漏洞
Vulnerability Description
Trend ServerProtect是一款企业级反病毒程序。 Trend ServerProtect的Web界面访问认证实现上存在漏洞，远程攻击者可以利用此漏洞无需认证执行管理操作，编辑或禁止防病毒功能。 Trend ServerProtect的Web管理界面默认监听TCP/14942端口，远程攻击者可以在访问每个页面的请求中插入赋与了任意值的splx_2376_info变量即可绕过验证执行管理操作。
CVSS Information
N/A
Vulnerability Type
N/A