Skip to content
OpenAdvisories
Unscored CVE-2016-8585 EUVD-2016-9432GHSA-hj32-4j4q-x3j7

admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary …

Published Apr 28, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the timezone parameter.

References