Trend Micro Deep Discovery Director 1.1 vulnerabilities

In Trend Micro Deep Discovery Director 1.1, configuration and database backup archives are not signed or validated, which may lead to unauthorized access to data.

A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.

Backup archives in Trend Micro Deep Discovery Director 1.1 are encrypted with a static password, suggesting that the same password may be used across all virtual appliance instances.