PT-2009-3254 · Trend Micro · Trend Micro Interscan Web Security Suite

Publicado 2009-02-17 · Atualizado 2018-10-30 · CVE-2009-0613

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Suite (IWSS) versions 3.1 before build 1237

Description The issue allows remote authenticated Auditor and Report Only users to bypass intended permission settings and modify the system configuration via requests to unspecified JSP pages.

Recommendations For Trend Micro InterScan Web Security Suite (IWSS) versions 3.1 before build 1237, update to a version that includes build 1237 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-0613

Produtos afetados

Trend Micro Interscan Web Security Suite

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0613 · Nota
• http://secunia.com/advisories/33867 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0613 · Nota de Segurança
• http://vupen.com/english/advisories/2009/0369 · Nota
• http://securitytracker.com/id?1021694 · Nota
• http://trendmicro.com/ftp/documentation/readme/iwss_31_win_en_readme_CP_1237_EN.txt · Aviso do Fabricante