Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass intended permission settings, and modify the system configuration, via requests to unspecified JSP pages.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Trend Micro InterScan Web Security Suite 未明JSP页认证授权绕过漏洞
Vulnerability Description
Trend Micro InterScan Web Security SuiteIWSS在网关处针对基于Web方式的攻击为企业网络提供动态的、集成式的安全保护。 Trend Micro InterScan Web Security Suite (IWSS) build 1237之前的版本3.1允许远程认证审查人员和远程唯一用户借助对未明JSP页提交的多个请求来绕过预设的许可设置并修改系统设置。
CVSS Information
N/A
Vulnerability Type
N/A