RULE(RULE ID:711134)

Rule General Information
Release Date: 2017-05-05
Rule Name: WEB-OTHER Trend Micro Control Manager dlp_policy.php Directory Traversal
Severity:
CVE ID:
Rule Protection Details
Description: A directory traversal vulnerability has been reported in Trend Micro Control Manager. This vulnerability is caused by improper sanitization of directory traversal characters by importFile.php.
Impact: Information disclosure
Affected OS: Windows, Other Unix, FreeBSD, Linux
Reference: ZeroDayInitiative:ZDI-17-070
ZeroDayInitiative:ZDI-17-071
ZeroDayInitiative:ZDI-17-072
Solutions
Update vendor's patch.