CVE-2016-8584: Critical severity trend micro threat discovery appliance vulnerability
Published Apr 28, 2017
·Updated
Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by guessing the value.
Affected Software
1 affected component
trendmicro Threat Discovery Appliance<=2.6.1062
Event History
Apr 28, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-8584?
CVE-2016-8584 is considered a high severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2016-8584?
To mitigate CVE-2016-8584, upgrade to Trend Micro Threat Discovery Appliance version 2.6.1063 or later.
3
What type of vulnerability is CVE-2016-8584?
CVE-2016-8584 is an authentication bypass vulnerability resulting from predictable session values.
4
Can CVE-2016-8584 be exploited remotely?
Yes, CVE-2016-8584 can be exploited remotely by attackers to bypass authentication.
5
Which versions of Trend Micro Threat Discovery Appliance are affected by CVE-2016-8584?
CVE-2016-8584 affects Trend Micro Threat Discovery Appliance versions up to and including 2.6.1062.