QwikSec

Security Database

CVE

CWE

Training

CVE-2018-10507

Published: Jun 12, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.

Vendor	Product	Versions
Trend Micro	Trend Micro OfficeScan	affected `11.0 SP1, XG`

References

http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt

x_refsource_MISC

https://success.trendmicro.com/solution/1119961

x_refsource_CONFIRM

exploit

x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.