CVE-2016-6268

HIGH · 7.8 CVSS Gepubliceerd: 30-01-2017 CWE-264

Beschrijving

Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary code with root privileges via a Trojan horse .war file in the Solr webapps directory.

Vendors

Trendmicro

Affected products

Smart Protection Server

References

qkaiser.github.io
success.trendmicro.com