Input validation error in InterScan Web Security Virtual Appliance (IWSVA) - CVE-2014-8510
Published: November 7, 2014 / Updated: August 10, 2020
Vulnerability identifier: #VU41148
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-8510
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote #AU# to gain access to sensitive information.
The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote authenticated users to read arbitrary files via vectors related to configuration input when saving filters.
Affected software
InterScan Web Security Virtual Appliance (IWSVA)
How to mitigate CVE-2014-8510
Install update from vendor's website.