CVE-2009-0612

MEDIUM 4.3CVE-2009-0612 · Published 17/02/2009 · updated 16/06/2026

In short

CVE-2009-0612 is a MEDIUM (CVSS 4.3) vulnerability affecting interscan web security suite (trendmicro), interscan web security virtual appliance (trendmicro).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
interscan web security suite trendmicro	`= 2.5= 3.1`	No fix yet
interscan web security virtual appliance trendmicro	`= 3.1`	No fix yet

Description

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.

References

More vulnerabilities in interscan web security suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free