4.3
CVSSv2

CVE-2009-0612

Published: 17/02/2009 Updated: 30/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.

Vulnerable Product Search on Vulmon Subscribe to Product

trendmicro interscan web security suite 2.5

trendmicro interscan web security suite 3.1

trendmicro interscan web security virtual appliance 3.1