CVE-2017-9035

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.4 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
trendmicroserverprotect
3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
http://seclists.org/fulldisclosure/2017/May/91
http://www.securitytracker.com/id/1038548
https://success.trendmicro.com/solution/1117411
https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities
http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
http://seclists.org/fulldisclosure/2017/May/91
http://www.securitytracker.com/id/1038548
https://success.trendmicro.com/solution/1117411
https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities