NVD

Id
25185  
Name
CVE-2015-3326  
Description
Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force attack.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-05-13  
Modified Date
2017-01-02  
Seq
2015-3326  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133209 25185 CVE-2015-3326 http://blog.malerisch.net/2016/05/trendmicro-smex-session-predictable-cve-2015-3326.html  View
133210 25185 CVE-2015-3326 http://esupport.trendmicro.com/solution/en-US/1109669.aspx  View
133211 25185 CVE-2015-3326 74661  View
133212 25185 CVE-2015-3326 1032323  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7369 JVNDB-2015-002689 Trend Micro ScanMail for Microsoft Exchange における認証を回避される脆弱性 Trend Micro ScanMail for Microsoft Exchange (SMEX) は、予測可能な値を持つ乱数生成器を使用して Web コンソールのセッション ID を作成するため、認証を回避される脆弱性が存在します。 CVE-2015-3326 80551 CVE-2015-3326 25185 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002689.html 2015-04-20 2015-05-19 View