CVE-2016-3987

Critical

Published: 12/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.

Risk Assessment

Exploitation of this vulnerability could lead to remote code execution, posing a serious threat to the security of the system and user data.

Recommendation

It is recommended to update Trend Micro Password Manager to the latest version to mitigate this vulnerability and restrict access to the API functions.

Original NVD description (English source)

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.