Improper input validation in Trendmicro Interscan Web Security Virtual Appliance

CVE-2014-8510

The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote authenticated users to read arbitrary files via vectors related to configuration input when saving filters.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.015 (71.4th percentile) — read the EPSS interpretation.

Affected products

Trendmicro Interscan_web_security_virtual_appliance — versions 5.1, 5.5, 5.6
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_MISC)