{"id":"CVE-2017-11398","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-11398","generatedAt":"2026-10-28T19:05:16.276Z","title":"A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable…","description":"A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system.","published":"2018-01-19T19:29:00.000Z","lastModified":"2026-06-17T01:01:45.000Z","status":"Modified","sourceIdentifier":"security@trendmicro.com","cvss":{"version":"3.0","score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-285","CWE-534"],"affected":["trendmicro/smart protection server"],"epss":{"score":0.08195,"percentile":0.94845,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.06218,"percentile":0.93293},{"date":"2026-09-22","score":0.08195,"percentile":0.9462}]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2017-12-19","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":43388,"kind":"exploit","title":"Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control","url":"https://www.exploit-db.com/exploits/43388","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/43388.md","file":"exploits/multiple/remote/43388.md","published":"2017-12-19","added":"2017-12-22","updated":"2017-12-22","author":"CoreLabs","type":"remote","platform":"multiple","port":null,"verified":false,"codes":["CVE-2017-14097","CVE-2017-14096","CVE-2017-14095","CVE-2017-14094","CVE-2017-11398"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities"}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB and the impact is high, while EPSS rates exploitation at 8.2%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/102275","tags":["Third Party Advisory","VDB Entry"],"source":"security@trendmicro.com"},{"url":"https://success.trendmicro.com/solution/1118992","tags":["Vendor Advisory"],"source":"security@trendmicro.com"},{"url":"https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities","tags":["Exploit","Third Party Advisory"],"source":"security@trendmicro.com"},{"url":"https://www.exploit-db.com/exploits/43388/","tags":["Third Party Advisory","VDB Entry"],"source":"security@trendmicro.com"},{"url":"http://www.securityfocus.com/bid/102275","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://success.trendmicro.com/solution/1118992","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/43388/","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-11398","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}