← Zuruck zu CVEs

CVE-2017-6338

N/A

Beschreibung

Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption Certificate and Private Key.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht4/5/2017

Zuletzt geandert4/20/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

trendmicro:interscan_web_security_virtual_appliance

Schwachen (CWE)

CWE-732

Referenzen

http://www.securityfocus.com/bid/97482(cve@mitre.org)

https://success.trendmicro.com/solution/1116960(cve@mitre.org)

https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf(cve@mitre.org)

http://www.securityfocus.com/bid/97482(af854a3a-2127-422b-91ae-364da2661108)

https://success.trendmicro.com/solution/1116960(af854a3a-2127-422b-91ae-364da2661108)

https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.