CVE-2017-9033
HighSummary
CSRF vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack user authentication for requests to start an update from an arbitrary source via a crafted request.
Risk Assessment
Attackers can exploit this vulnerability for unauthorized access and potentially introduce malware to the server, leading to serious security implications for the organization.
Recommendation
It is recommended to update Trend Micro ServerProtect to the latest version that includes security patches and to implement additional CSRF protection mechanisms.
Other vulnerabilities in Trend Micro ServerProtect for Linux 3.0
See all- CVE-2017-9036High
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.
- CVE-2017-9035High
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
- CVE-2017-9034Critical
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges due to failure to validate software updates.
Original NVD description (English source)
Cross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for requests to start an update from an arbitrary source via a crafted request to SProtectLinux/scanoption_set.cgi, related to the lack of anti-CSRF tokens.