Authentication Bypass in Trend Micro OfficeScan Versions 3.0 to 5.x
CVE-2003-1341
Currently unrated
What is CVE-2003-1341?
The default installation of Trend Micro OfficeScan versions 3.0 through 3.54 and 5.x is susceptible to an authentication bypass vulnerability. This flaw allows remote attackers to gain unauthorized access to the web management console by directly requesting the cgiMasterPwd.exe script, circumventing the authentication gate provided by cgiChkMasterPasswd.exe. This can lead to significant security risks, including unauthorized changes to the system settings and exposure of sensitive information. Organizations using these versions should consider updating their software and reviewing their security configurations.