cve/2016/CVE-2016-7552.md
2024-05-26 14:27:05 +02:00

936 B

CVE-2016-7552

Description

On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.

POC

Reference

No PoCs from references.

Github