CVE-2017-6338: Medium severity trendmicro Interscan Web Security Virtual Appliance vulnerability
Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption Certificate and Private Key.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6338?
CVE-2017-6338 has a medium severity level due to its potential for unauthorized access and modification of sensitive settings.
How do I fix CVE-2017-6338?
To fix CVE-2017-6338, upgrade your Trend Micro InterScan Web Security Virtual Appliance to version 6.5 CP 1746 or later.
Who is affected by CVE-2017-6338?
CVE-2017-6338 affects users of Trend Micro InterScan Web Security Virtual Appliance 6.5 prior to CP 1746.
What issues does CVE-2017-6338 cause?
CVE-2017-6338 allows low-privileged authenticated users to change FTP Access Control Settings and manipulate reports.
How can I determine if I am vulnerable to CVE-2017-6338?
You can determine vulnerability to CVE-2017-6338 by checking if your version of Trend Micro InterScan Web Security Virtual Appliance is lower than 6.5 CP 1746.