PT-2009-3254 · Trend Micro · Trend Micro Interscan Web Security Suite

Published 2009-02-17 · Updated 2018-10-30 · CVE-2009-0613

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Suite (IWSS) versions 3.1 before build 1237

Description The issue allows remote authenticated Auditor and Report Only users to bypass intended permission settings and modify the system configuration via requests to unspecified JSP pages.

Recommendations For Trend Micro InterScan Web Security Suite (IWSS) versions 3.1 before build 1237, update to a version that includes build 1237 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-0613

Affected Products

Trend Micro Interscan Web Security Suite

References · 6

• http://secunia.com/advisories/33867 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0613 · Security Note
• http://trendmicro.com/ftp/documentation/readme/iwss_31_win_en_readme_CP_1237_EN.txt · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0613 · Note
• http://vupen.com/english/advisories/2009/0369 · Note
• http://securitytracker.com/id?1021694 · Note