CVE-2009-0613

2009-02-1717:00:00

mitre

www.cve.org

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

61.6%

JSON

Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass intended permission settings, and modify the system configuration, via requests to unspecified JSP pages.

References

secunia.com/advisories/33867

www.securitytracker.com/id?1021694

www.trendmicro.com/ftp/documentation/readme/iwss_31_win_en_readme_CP_1237_EN.txt

www.vupen.com/english/advisories/2009/0369