CVE-2017-11380

Critical

Published: 01/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Backup archives in Trend Micro Deep Discovery Director 1.1 are encrypted with a static password, suggesting that the same password may be used across all virtual appliance instances.

Risk Assessment

The use of a static password across different installations increases the risk of unauthorized access to backup data, potentially leading to a loss of confidentiality.

Recommendation

It is recommended to change the password to be unique for each instance and implement a password management policy to enhance security.

Original NVD description (English source)

Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Discovery Director 1.1.