Description (CNA)
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7286
- http://www.securityfocus.com/archive/1/220666
ADP enrichment
No English description supplied.