CVE-2017-14085: Infoleak
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14085?
CVE-2017-14085 is classified as a medium severity vulnerability that can lead to information disclosure.
How do I fix CVE-2017-14085?
To fix CVE-2017-14085, ensure that your Trend Micro OfficeScan is updated to the latest version and apply any available patches.
What types of information can be disclosed in CVE-2017-14085?
CVE-2017-14085 allows unauthenticated users to access the NT domain information and details about the PHP version and modules.
Who is affected by CVE-2017-14085?
CVE-2017-14085 affects users of Trend Micro OfficeScan versions 11.0 SP1 and 12.0.
Is CVE-2017-14085 exploitable by remote attackers?
Yes, CVE-2017-14085 can be exploited by unauthenticated remote users who have access to the OfficeScan server.