vendor:
Data Loss Prevention Virtual Appliance
by:
Luis Martinez, Sergio Lopez,White Hat Consultores
N/A
CVSS
N/A
Directory Traversal
22
CWE
Product Name: Data Loss Prevention Virtual Appliance
Affected Version From: 5.5
Affected Version To: 5.5
Patch Exists: Yes
Related CWE: N/A
CPE: a:trend_micro:data_loss_prevention_virtual_appliance:5.5
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2011
Directory Traversal Vulnerability in Trend Micro Data Loss Prevention Virtual Appliance 5.5
A directory traversal vulnerability, can be exploited to read files outside of the web root. The vulnerability is present in Trend Micro Data Loss Prevention Virtual Appliance 5.5. An attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable server. This will allow the attacker to read files outside of the web root.
Mitigation:
Upgrade to the latest version of Trend Micro Data Loss Prevention Virtual Appliance 5.5.
