CVE Catalog

CVE-2016-8584

Critical
Published: Translated: NVD NIST

Summary

Trend Micro Threat Discovery Appliance version 2.6.1062r1 and earlier uses predictable session values, allowing remote attackers to bypass authentication by guessing the value.

Risk Assessment

Attackers can gain unauthorized access to the system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update to the latest software version to eliminate predictable session values and implement additional security mechanisms.

Original NVD description (English source)

Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by guessing the value.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS