CVE-2017-11379

Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1.

• CWE-345

• https://success.trendmicro.com/solution/1117663Patch, Vendor Advisory
• https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilitiesThird Party Advisory
• https://success.trendmicro.com/solution/1117663Patch, Vendor Advisory
• https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilitiesThird Party Advisory

Published

Aug 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11364The CMS installer in Joomla! before 3.7.4 does not verify a …
• CVE-2017-11365Certain Symfony products are affected by: Incorrect Access C…
• CVE-2017-11366components/filemanager/class.filemanager.php in Codiad befor…
• CVE-2017-11367The shoco_decompress function in the API in shoco through 20…
• CVE-2017-11368In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated…
• CVE-2017-1137IBM WebSphere Application Server 8.0 and 8.5.5 could provide…
• CVE-2017-11380Backup archives were found to be encrypted with a static pas…
• CVE-2017-11381A command injection vulnerability exists in Trend Micro Deep…
• CVE-2017-11382Denial of Service vulnerability in Trend Micro Deep Discover…
• CVE-2017-11383SQL Injection in Trend Micro Control Manager 6.0 causes Remo…
• CVE-2017-11384SQL Injection in Trend Micro Control Manager 6.0 causes Remo…
• CVE-2017-11385SQL Injection in Trend Micro Control Manager 6.0 causes Remo…