Trend Micro InterScan Web Security Virtual Appliance Information Disclosure Vulnerability

Vulnerability Details

This vulnerability allows remote attackers to read files from the underlying operating system on vulnerable installations of Trend Micro InterScan Web Security Virtual Appliance web application authentication is required to exploit this vulnerability.

The specific flaw exists within multiple areas of the AdminUI. The issue lies in the handling of configuration input due to a failure to safely sanitize user data before saving filters. An attacker could leverage this vulnerability to read any file to which the web app has read access.

Additional Details

Vendor has released a hotfix to address the issue: IWSVA 6.0 HF build 1244

Disclosure Timeline

• 2014-06-12 - Vulnerability reported to vendor
• 2014-11-06 - Coordinated public release of advisory

Credit

Brandon Perry

Back to Advisories