Vulnerability in Trend Micro Serverprotect
CVE-2007-1169
The web interface in Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network.
EPSS: 0.016 (74.1th percentile) — read the EPSS interpretation.
Affected products
- Trend_micro Serverprotect — versions 1.25_2007-02-16
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)