CVE-2017-6338: Incorrect Permission Assignment for Critical Resource

Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption...

PT-2017-17005

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance IWSVA versions 6.5 before CP 1746 Description The issue concerns Access Control problems, allowing an authenticated, remote user with low privileges, such as Reports Only or Auditor, to...