CVE-2016-7552
CriticalSummary
The Trend Micro Threat Discovery Appliance 2.6.1062r1 has a directory traversal vulnerability that allows a remote, unauthenticated attacker to delete arbitrary files as root by processing a session_id cookie. This can be exploited to bypass authentication or cause a DoS.
Risk Assessment
This vulnerability poses a serious risk to organizations, allowing attackers to delete critical system files, potentially leading to data loss or service disruption.
Recommendation
It is recommended to update the appliance to the latest version to mitigate this vulnerability and implement additional security measures such as log monitoring and restricting access to critical resources.
Original NVD description (English source)
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.