.. / CVE-2016-7552

• Auth Bypass
• Nuclei
• Web

Exploit for Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass (CVE-2016-7552)

Description:

Trend Micro Threat Discovery Appliance 2.6.1062r1 is vulnerable to a directory traversal vulnerability when processing a session_id cookie, which allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.

Nuclei Template

View the template here CVE-2016-7552.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2016/CVE-2016-7552.yaml

References: