CVE-2014-8510

2014-11-0719:55:00

CWE-20

[email protected]

web.nvd.nist.gov

trend micro

interscan web security

iwsva

cve-2014-8510

file read

remote authenticated users

security vulnerability

6.4 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.009 Low

EPSS

Percentile

82.7%

JSON

The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote authenticated users to read arbitrary files via vectors related to configuration input when saving filters.

CPENameOperatorVersion
trendmicro:interscan_web_security_virtual_appliancetrendmicro interscan web security virtual applianceeq6.0
trendmicro:interscan_web_security_virtual_appliancetrendmicro interscan web security virtual applianceeq5.1
trendmicro:interscan_web_security_virtual_appliancetrendmicro interscan web security virtual applianceeq5.6
trendmicro:interscan_web_security_virtual_appliancetrendmicro interscan web security virtual applianceeq5.5

CPE	Name	Operator	Version
trendmicro:interscan_web_security_virtual_appliance	trendmicro interscan web security virtual appliance	eq	6.0
trendmicro:interscan_web_security_virtual_appliance	trendmicro interscan web security virtual appliance	eq	5.1
trendmicro:interscan_web_security_virtual_appliance	trendmicro interscan web security virtual appliance	eq	5.6
trendmicro:interscan_web_security_virtual_appliance	trendmicro interscan web security virtual appliance	eq	5.5