CVE-2015-2873

2015-08-2315:59:02

CWE-425

certcc

web.nvd.nist.gov

cve-2015-2873

trend micro

deep discovery inspector

ddi

remote attack

sensitive information disclosure

configuration change

nvd

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

49.9%

JSON

Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct request to the (1) system log URL, (2) whitelist URL, or (3) blacklist URL.

Affected configurations

Nvd

Node

trendmicrodeep_discovery_inspectorMatch3.5

trendmicrodeep_discovery_inspectorMatch3.5ja

trendmicrodeep_discovery_inspectorMatch3.5zh

trendmicrodeep_discovery_inspectorMatch3.6

trendmicrodeep_discovery_inspectorMatch3.7

trendmicrodeep_discovery_inspectorMatch3.7ja

trendmicrodeep_discovery_inspectorMatch3.7zh

trendmicrodeep_discovery_inspectorMatch3.8

trendmicrodeep_discovery_inspectorMatch3.8ja

VendorProductVersionCPE
trendmicrodeep_discovery_inspector3.5cpe:2.3:a:trendmicro:deep_discovery_inspector:3.5:*:*:*:*:*:*:*
trendmicrodeep_discovery_inspector3.5cpe:2.3:a:trendmicro:deep_discovery_inspector:3.5:*:*:ja:*:*:*:*
trendmicrodeep_discovery_inspector3.5cpe:2.3:a:trendmicro:deep_discovery_inspector:3.5:*:*:zh:*:*:*:*
trendmicrodeep_discovery_inspector3.6cpe:2.3:a:trendmicro:deep_discovery_inspector:3.6:*:*:*:*:*:*:*
trendmicrodeep_discovery_inspector3.7cpe:2.3:a:trendmicro:deep_discovery_inspector:3.7:*:*:*:*:*:*:*
trendmicrodeep_discovery_inspector3.7cpe:2.3:a:trendmicro:deep_discovery_inspector:3.7:*:*:ja:*:*:*:*
trendmicrodeep_discovery_inspector3.7cpe:2.3:a:trendmicro:deep_discovery_inspector:3.7:*:*:zh:*:*:*:*
trendmicrodeep_discovery_inspector3.8cpe:2.3:a:trendmicro:deep_discovery_inspector:3.8:*:*:*:*:*:*:*
trendmicrodeep_discovery_inspector3.8cpe:2.3:a:trendmicro:deep_discovery_inspector:3.8:*:*:ja:*:*:*:*

Vendor	Product	Version	CPE
trendmicro	deep_discovery_inspector	3.5	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.5:::::::*
trendmicro	deep_discovery_inspector	3.5	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.5:::ja::::
trendmicro	deep_discovery_inspector	3.5	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.5:::zh::::
trendmicro	deep_discovery_inspector	3.6	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.6:::::::*
trendmicro	deep_discovery_inspector	3.7	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.7:::::::*
trendmicro	deep_discovery_inspector	3.7	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.7:::ja::::
trendmicro	deep_discovery_inspector	3.7	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.7:::zh::::
trendmicro	deep_discovery_inspector	3.8	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.8:::::::*
trendmicro	deep_discovery_inspector	3.8	cpe:2.3:a:trendmicro:deep_discovery_inspector:3.8:::ja::::