Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which makes it easier for remote attackers to hijack sessions via brute-force attacks. NOTE: this can be leveraged for code execution through an unspecified "manipulation of the configuration."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
趋势科技 多个防病毒软件 Web管理控制台 绕过认证漏洞
Vulnerability Description
趋势防病毒软件是用户范围较大的分布式杀毒软件。 趋势防病毒软件的web管理控制台在用户登录时创建一个随机会话令牌来识别用户。攻击者可以相对容易地以暴力猜测的方式得到认证令牌，冒充管理员角色，后通过操控配置完全控制系统。
CVSS Information
N/A
Vulnerability Type
N/A