4.3

CVE-2009-0612

EPSS 0.68%
Veröffentlicht 17.02.2009 17:30:06
Zuletzt bearbeitet 23.04.2026 00:35:47
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trendmicro ≫ Interscan Web Security Suite Version2.5

Trendmicro ≫ Interscan Web Security Suite Version3.1

Trendmicro ≫ Interscan Web Security Virtual Appliance Version3.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.68%	0.692

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://secunia.com/advisories/33891

Vendor Advisory

http://www.securityfocus.com/archive/1/500760/100/0/threaded

http://www.securityfocus.com/bid/33687

http://www.securitytracker.com/id?1021716

https://exchange.xforce.ibmcloud.com/vulnerabilities/48681

https://nvd.nist.gov/vuln/detail/CVE-2009-0612

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0612

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0612

EUVD