Trend Micro Threat Discovery Appliance Auth Bypass via Directory Traversal

As the Trend Micro Threat Discovery Appliance 2.6.1062r1 processes a session id cookie, directory traversal enables a remote, unauthenticated intruder to delete arbitrary files as root. This can be used to bypass authentication or to trigger a denial of service.

Mitigation / Precaution

• In order to patch this vulnerability, please install the official patch Trend Micro Threat Discovery Appliance made available for supported, vulnerable instances.

Written by

Sooraj V Nair

Cyber Security Engineer

Sooraj was probably the kid who opened up a remote control just to see what was inside, then had to figure out how to put it back together before anyone noticed. That curiosity eventually found its way into cybersecurity, where breaking things is actually part of the job description. Today, he explores vulnerabilities, analysis threats, and helps build safer digital spaces. His favourite question remains the same: “What happens if I try this?”