NVD

Id
19718  
Name
CVE-2016-3987  
Description
The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-04-18  
Seq
2016-3987  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
108025 19718 CVE-2016-3987 http://blog.trendmicro.com/information-on-reported-vulnerabilities-in-trend-micro-password-manager/  View
108026 19718 CVE-2016-3987 http://packetstormsecurity.com/files/135222/TrendMicro-Node.js-HTTP-Server-Command-Execution.html  View
108027 19718 CVE-2016-3987 1034662  View
108028 19718 CVE-2016-3987 https://code.google.com/p/google-security-research/issues/detail?id=693  View
108029 19718 CVE-2016-3987 39218  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1323 JVNDB-2016-002096 トレンドマイクロのパスワードマネージャーの HTTP サーバにおける任意のコマンドを実行される脆弱性 トレンドマイクロのパスワードマネージャーの HTTP サーバには、任意のコマンドを実行される脆弱性が存在します。 CVE-2016-3987 90493 CVE-2016-3987 19718 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002096.html 2016-01-11 2016-04-19 View