PT-2017-10036 · Trend Micro · Trend Micro Interscan Web Security Virtual Appliance

Publicado 2017-02-21 · Atualizado 2017-07-25 · CVE-2016-9269

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Interscan Web Security Virtual Appliance (IWSVA) versions 6.5-SP2 Build Linux 1707 and earlier

Description The issue allows authenticated, remote users with least privileges to run arbitrary commands on the system as root via Patch Update functionality in the com.trend.iwss.gui.servlet.ManagePatches component.

Recommendations For versions 6.5-SP2 Build Linux 1707 and earlier, update to Version 6.5 CP 1737 to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-9269

Produtos afetados

Trend Micro Interscan Web Security Virtual Appliance

Referências · 6

• 🔥 https://exploit-db.com/exploits/41361 · Exploit
• http://securityfocus.com/bid/96252 · Nota
• https://success.trendmicro.com/solution/1116672 · Aviso do Fabricante
• http://securitytracker.com/id/1037849 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9269 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9269 · Aviso do Fabricante