PT-2017-10051 · Trend Micro · Trend Micro Interscan Web Security Virtual Appliance

Publicado 2017-02-21 · Atualizado 2017-07-25 · CVE-2016-9314

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance (IWSVA) versions prior to 6.5 CP 1737

Description The issue allows authenticated, remote users with least privileges to backup the system configuration and download it onto their local machine, potentially exposing sensitive information like passwd/shadow files, RSA certificates, Private Keys, and Default Passphrase.

Recommendations For versions prior to 6.5 CP 1737, update to version 6.5 CP 1737 to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-9314

Produtos afetados

Trend Micro Interscan Web Security Virtual Appliance

Referências · 6

• 🔥 https://exploit-db.com/exploits/41361 · Exploit
• http://securityfocus.com/bid/96252 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9314 · Nota de Segurança
• https://success.trendmicro.com/solution/1116672 · Aviso do Fabricante
• http://securitytracker.com/id/1037849 · Nota
• https://osv.dev/vulnerability/CVE-2016-9314 · Aviso do Fabricante