CVE-2008-2433
27.08.2008, 20:41
The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which makes it easier for remote attackers to hijack sessions via brute-force attacks. NOTE: this can be leveraged for code execution through an unspecified "manipulation of the configuration."Enginsight
| Vendor | Product | Version |
|---|---|---|
| trendmicro | client_server_messaging_suite | 3.5 |
| trendmicro | client_server_messaging_suite | 3.6 |
| trendmicro | officescan | 7.0 ≤ 𝑥 ≤ 8.0 |
| trendmicro | worry-free_business_security | 5.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References