Potential Privilege Escalation Vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5
CVE-2024-36359

5.4MEDIUM

Key Information:

Vendor

Trend Micro
Status
Trend Micro Interscan Web Security Virtual Appliance
Vendor
CVE Published:
10 June 2024

What is CVE-2024-36359?

A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected Version(s)

Trend Micro InterScan Web Security Virtual Appliance 6.5 < 6.5 Build 3334

References

https://success.trendmicro.com/dcx/s/solution/000298065
https://www.zerodayinitiative.com/advisories/ZDI-24-574/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.