Описание
Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption Certificate and Private Key.
Ссылки
- Third Party AdvisoryVDB Entry
- PatchVendor Advisory
- ExploitTechnical DescriptionThird Party Advisory
- Third Party AdvisoryVDB Entry
- PatchVendor Advisory
- ExploitTechnical DescriptionThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.5 (включая)
cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:*:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.01013
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption Certificate and Private Key.
EPSS
Процентиль: 77%
0.01013
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-732