CVE-2009-0612

2009-02-1717:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

65.8%

JSON

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.