Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-25329

Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trendmicro

Description

Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trend Micro Trend Micro ServerProtect for Storage

  • 6.0affected

Trend Micro Trend Micro ServerProtect for Microsoft Windows / Novell NetWare

  • 5.8affected

Trend Micro Trend Micro ServerProtect for EMC Celerra

  • 5.8affected

Trend Micro Trend Micro ServerProtect for Network Appliance Filers

  • 5.8affected

References