CVE-2009-0612
Published Feb 17, 2009
Last updated 6 years ago
Overview
- Description
- Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:trendmicro:interscan_web_security_suite:2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BC79C75-0540-491C-BD74-DE305CB32EF6"
},
{
"criteria": "cpe:2.3:a:trendmicro:interscan_web_security_suite:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02441701-20A1-4600-8E02-71069147BB1F"
},
{
"criteria": "cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D189E876-B64F-4C33-978C-AE502CD9F675"
}
],
"operator": "OR"
}
]
}
]