Description
The web interface in Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network.
CVSS Metrics
- Vector
- AV:N/AC:L/Au:N/C:P/I:N/A:N
- Access Vector
- network
- Access Cmplx
- low
- Auth
- none
- Confidentiality
- partial
- Integrity
- none
- Availability
- none
- Weaknesses
- NVD-CWE-Other
Metadata
- Primary Vendor
- TREND_MICRO
- Published
- 3/2/2007
- Last Modified
- 4/9/2025
- Source
- NIST NVD
- Note: Verify all details with official vendor sources before applying patches.
Affected Products
trend_micro : serverprotecttrend_micro : serverprotect
AI-Powered Remediation
Generate remediation guidance or a C-suite brief for this vulnerability.