CVE-2016-8590: Critical severity trend micro threat discovery appliance vulnerability
Published Apr 28, 2017
·Updated
logquerydlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter.
Affected Software
1 affected component
trendmicro Threat Discovery Appliance<=2.6.1062
Event History
Apr 28, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-8590?
CVE-2016-8590 is considered critical due to its potential for remote code execution by authenticated users.
2
How do I fix CVE-2016-8590?
To fix CVE-2016-8590, upgrade Trend Micro Threat Discovery Appliance to version 2.6.1063 or later.
3
Who is affected by CVE-2016-8590?
Authenticated users of Trend Micro Threat Discovery Appliance version 2.6.1062r1 and earlier are affected by CVE-2016-8590.
4
What type of vulnerability is CVE-2016-8590?
CVE-2016-8590 is a remote code execution vulnerability.
5
Can CVE-2016-8590 be exploited remotely?
Yes, CVE-2016-8590 can be exploited remotely by authenticated users.