CVE-2017-5481 Information disclosure in n/a

What is CVE-2017-5481?

CVE-2017-5481 is a high-severity vulnerability in Trendmicro Officescan, published on 3 May 2017. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a web-console operation.

Weakness: CWE-200

Which versions are affected by CVE-2017-5481?

It affects 1 product.

Products include Trendmicro Officescan.

How do I fix CVE-2017-5481?

No fix has been published for CVE-2017-5481 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-5481 being exploited?

There is no known exploitation of CVE-2017-5481 in the wild and no public exploit code.

Other vulnerabilities in Trendmicro Officescan

• CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Exploited High 8.8
• CVE-2017-14089 Memory corruption in Trend Micro OfficeScan Critical 9.8
• CVE-2017-11393 Command injection in Trend Micro OfficeScan Critical 9.8
• CVE-2017-11394 Command injection in Trend Micro OfficeScan Critical 9.8
• CVE-2018-10508 Privilege escalation in Trend Micro OfficeScan High 8.8

All Trendmicro Officescan vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6q22-m5m2-9cph.