Trend Micro InterScan Web Security Virtual Appliance Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	70964
Class:	Design Error
CVE:	CVE-2014-8510
Remote:	Yes
Local:	No
Published:	Nov 06 2014 12:00AM
Updated:	Nov 06 2014 12:00AM
Credit:	Brandon Perry
Vulnerable:	Trendmicro Interscan Web Security Virtual Appliance (IWSVA) 6.0 SP1 Trendmicro Interscan Web Security Virtual Appliance (IWSVA) 5.6 Trendmicro Interscan Web Security Virtual Appliance (IWSVA) 5.5 Trend Micro InterScan Web Security Virtual Appliance 0
Not Vulnerable:	Trendmicro Interscan Web Security Virtual Appliance (IWSVA) 6.0 HF build 1244

Trend Micro InterScan Web Security Virtual Appliance Multiple Information Disclosure Vulnerabilities

Trend Micro InterScan Web Security Virtual Appliance is prone to multiple information-disclosure vulnerabilities.

Attackers can exploit these issues to obtain potentially sensitive information that may lead to further attacks.

Trend Micro InterScan Web Security Virtual Appliance Multiple Information Disclosure Vulnerabilities

Attackers can exploit these issues using browser or readily available tools.

Trend Micro InterScan Web Security Virtual Appliance Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Trend Micro InterScan Web Security Virtual Appliance Multiple Information Disclosure Vulnerabilities

References:

• Trend Micro Homepage (Trend Micro)
  
• Trend Micro InterScan Web Security Virtual Appliance Information Disclosure Vuln (Zero Day Initiative)