CVE-2018-6222

Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulated to execute arbitrary commands and attain command execution on a vulnerable system.

Affected

Trend Micro · Trend Micro Email Encryption Gateway

CVSS v3.0 NVD

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.25% chance of exploitation in the next 30 days, 69th percentile

Published

2018-03-15

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vul…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44166

Security advisories

• https://success.trendmicro.com/solution/1119349

References

• CVE Record
• NVD entry