PT-2017-17006 · Trend Micro · Trend Micro Interscan Web Security Virtual Appliance

Publicado 2017-04-05 · Atualizado 2019-10-03 · CVE-2017-6339

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance (IWSVA) versions 6.5 before CP 1746

Description The issue concerns the mismanagement of key and certificate data. By default, IWSVA acts as a private Certificate Authority (CA) and generates digital certificates for secure HTTPS connections. It also allows administrators to upload their own certificates. An attacker with low privileges can download the current CA certificate and Private Key, which can be used to decrypt HTTPS traffic and compromise confidentiality. The default Private Key is encrypted with a weak passphrase, making it easier for an attacker to decrypt the key if the default certificate and key are used.

Recommendations For Trend Micro InterScan Web Security Virtual Appliance (IWSVA) versions 6.5 before CP 1746, update to a version that includes CP 1746 or later to address the issue with key and certificate data mismanagement. As a temporary workaround, consider changing the default Private Key passphrase to a stronger one and restricting access to the CA certificate and Private Key to minimize the risk of exploitation.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-521

CWE-269

Identificadores relacionados

CVE-2017-6339

Produtos afetados

Trend Micro Interscan Web Security Virtual Appliance

Referências · 6

• 🔥 https://exploit-db.com/exploits/42013 · Exploit
• 🔥 https://qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-6339 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6339 · Aviso do Fabricante
• https://success.trendmicro.com/solution/1116960 · Aviso do Fabricante
• http://securityfocus.com/bid/97492 · Nota