2 matches found
CVE-2009-0613
Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 is affected. Remote authenticated Auditor and Report Only users can bypass permission controls and modify system configuration via requests to unspecified JSP pages. CVSS v2 base score is 6.0 (Medium impact) with network attack...
CVE-2009-0612
CVE-2009-0612 affects Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x. When basic authorization is enabled on the standalone proxy, the product forwards the Proxy-Authorization header from Windows Media Player, enabling remote web serve...