CVE-2016-6268: High severity trendmicro Smart Protection Server vulnerability
Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary code with root privileges via a Trojan horse .war file in the Solr webapps directory.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6268?
CVE-2016-6268 has a high severity rating due to its potential to allow local users to execute arbitrary code with root privileges.
How do I fix CVE-2016-6268?
To fix CVE-2016-6268, upgrade Trend Micro Smart Protection Server to version 2.5 build 2200, 2.6 build 2106, or 3.0 build 1330 or later.
Who is affected by CVE-2016-6268?
CVE-2016-6268 affects users of Trend Micro Smart Protection Server versions 2.5, 2.6, and 3.0 prior to the specified builds.
What is the impact of CVE-2016-6268?
The impact of CVE-2016-6268 includes the potential for unauthorized code execution on the affected systems, compromising the security of the server.
Can CVE-2016-6268 be exploited remotely?
No, CVE-2016-6268 requires local webserver access to exploit, meaning an attacker must have local access to the affected server.