CIRT Security Advisory – The web application for the Trend Micro Control Manager Enterprise Edition 3.0 is susceptible to a replay attack. The username and password are encrypted but there is not any form of timestamp mechanism to make this more advanced and secure.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35737/cirt-28-advisory.pdf
Source: https://packetstormsecurity.com/files/35737/cirt-28-advisory.pdf.html