Unscored severity · published Feb 17, 2009
CVE-2009-0612
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IW
Interscan Web Security Suite · Trendmicro
2.5; 3.1 · source: NVD
IW
Interscan Web Security Virtual Appliance · Trendmicro
3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0612
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0612
Vendor Advisory
http://secunia.com/advisories/33891
www.securityfocus.com
http://www.securityfocus.com/archive/1/500760/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/33687
www.securitytracker.com
http://www.securitytracker.com/id?1021716
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/48681
More from Interscan Web Security Suite
–
CVE-2009-0613
Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass intended permission settings, and modify…