CVE-2009-0612

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the…

published February 17, 2009

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02165 · 82.1th percentile
Published
2009-02-17T17:00Z
EPSS history
Timeline
  • 17 FEB 17:00Z
    Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the…
    cvelistv5