Security Advisory

CVE-2016-5840

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-06-30 16:00:00

Last updated 2024-08-06 01:15:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header.

← Browse all CVEs View on cve.org ↗