CVE-2016-9314

Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version…

published February 21, 2017

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to backup the system configuration and download it onto their local machine. This backup file contains sensitive information like passwd/shadow files, RSA certificates, Private Keys and Default Passphrase, etc. This was resolved in Version 6.5 CP 1737.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03021 · 87.3th percentile
Published
2017-02-21T07:46Z
EPSS history
Timeline
  • 21 FEB 07:46Z
    Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version…
    cvelistv5