{"containers": {"cna": {"affected": [{"product": "Trend Micro Deep Discovery Director", "vendor": "Trend Micro, Inc.", "versions": [{"status": "affected", "version": "1.1"}]}], "datePublic": "2017-07-12T00:00:00", "descriptions": [{"lang": "en", "value": "Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Discovery Director 1.1."}], "problemTypes": [{"descriptions": [{"description": "Insecure Permissions", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-01T14:57:01", "orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272", "shortName": "trendmicro"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://success.trendmicro.com/solution/1117663"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@trendmicro.com", "DATE_PUBLIC": "2017-07-12T00:00:00", "ID": "CVE-2017-11380", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Trend Micro Deep Discovery Director", "version": {"version_data": [{"version_value": "1.1"}]}}]}, "vendor_name": "Trend Micro, Inc."}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Discovery Director 1.1."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Insecure Permissions"}]}]}, "references": {"reference_data": [{"name": "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities", "refsource": "MISC", "url": "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities"}, {"name": "https://success.trendmicro.com/solution/1117663", "refsource": "CONFIRM", "url": "https://success.trendmicro.com/solution/1117663"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T18:05:30.486Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://success.trendmicro.com/solution/1117663"}]}]}, "cveMetadata": {"assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272", "assignerShortName": "trendmicro", "cveId": "CVE-2017-11380", "datePublished": "2017-08-01T15:00:00Z", "dateReserved": "2017-07-17T00:00:00", "dateUpdated": "2024-09-17T04:25:28.232Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:deep_discovery_director:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "7ABBB5E3-0B14-42F9-8BBE-E717D2A6315F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Discovery Director 1.1."}, {"lang": "es", "value": "Los archivos de copia de seguridad estaban cifrados con una contrase\u00f1a est\u00e1tica en diferentes instalaciones, lo que sugiere que la misma contrase\u00f1a se ha podido utilizar en todos los modelos de dispositivos virtuales de Trend Micro Deep Discovery Director 1.1."}], "id": "CVE-2017-11380", "lastModified": "2017-08-07T18:47:46.647", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-08-01T15:29:00.357", "references": [{"source": "security@trendmicro.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://success.trendmicro.com/solution/1117663"}, {"source": "security@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities"}], "sourceIdentifier": "security@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}