Description
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
References
- 1038548 vdb-entry
- https://success.trendmicro.com/solution/1117411
- https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities
- 20170523 [CORE-2017-0002] - Trend Micro ServerProtect Multiple Vulnerabilities mailing-list
- http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html