CVE-2017-11379
HighSummary
In Trend Micro Deep Discovery Director 1.1, configuration and database backup archives are not signed or validated, which may lead to unauthorized access to data.
Risk Assessment
The lack of signing and validation of archives may allow attackers to manipulate data, posing a serious threat to system integrity.
Recommendation
It is recommended to implement signing and validation mechanisms for configuration and backup archives to secure data against unauthorized access.
Other vulnerabilities in Trend Micro Deep Discovery Director 1.1
See all- CVE-2017-11381Critical
A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.
- CVE-2017-11380Critical
Backup archives in Trend Micro Deep Discovery Director 1.1 are encrypted with a static password, suggesting that the same password may be used across all virtual appliance instances.
Original NVD description (English source)
Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1.