CVE-2018-3609 Information disclosure in Trend Micro InterScan Messaging Security Virtual Appliance
Unauthenticated attackers can access sensitive log data to bypass authentication on Trend Micro InterScan Messaging Security appliances.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-3609?
CVE-2018-3609 is a high-severity vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance, published on 16 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information in a particular log file that could be used to bypass authentication on vulnerable installations.
Which versions are affected by CVE-2018-3609?
It affects 1 product.
Products include Trendmicro Interscan Messaging Security Virtual Appliance.
How do I fix CVE-2018-3609?
No fix has been published for CVE-2018-3609 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-3609 being exploited?
There is no known exploitation of CVE-2018-3609 in the wild and no public exploit code.
Other vulnerabilities in Trend Micro InterScan Messaging Security Virtual Appliance
- CVE-2020-27016 Cross-site request forgery in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)
- CVE-2020-27694 Other in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)
- CVE-2017-11391 Command injection in Trend Micro InterScan Messaging Security Virtual Appliance
- CVE-2017-11392 Command injection in Trend Micro InterScan Messaging Security Virtual Appliance
- CVE-2017-6398 Command injection in n/a
Sources
Also known as GHSA-999p-3hf6-2qgp.