Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:officescan:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrendmicro (c5410dda-4dad-5329-a26d-d91c43e01834)
ProductOfficescan (1b62076e-67fd-575d-acde-d1b597d7631f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2433 vulnerable 2026-06-08 04:50:24.073187 Details available
The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which makes it easier for remote attackers to hijack sessions via brute-force attacks. NOTE: this can be leveraged for code execution through an unspecified "manipulation of the configuration."
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T08:58:02.597Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.