CVE-2016-9314

Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to backup the system configuration and download it onto their local machine. This backup file contains sensitive information like passwd/shadow files, RSA certificates, Private Keys and Default Passphrase, etc. This was resolved in Version 6.5 CP 1737.

• CWE-200

• http://www.securityfocus.com/bid/96252
• http://www.securitytracker.com/id/1037849
• https://success.trendmicro.com/solution/1116672Patch, Vendor Advisory
• http://www.securityfocus.com/bid/96252
• http://www.securitytracker.com/id/1037849
• https://success.trendmicro.com/solution/1116672Patch, Vendor Advisory

Published

Feb 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9306Multiple buffer overflows in the Autodesk FBX-SDK before 201…
• CVE-2016-9307Multiple buffer overflows in the Autodesk FBX-SDK before 201…
• CVE-2016-9310The control mode (mode 6) functionality in ntpd in NTP befor…
• CVE-2016-9311ntpd in NTP before 4.2.8p9, when the trap service is enabled…
• CVE-2016-9312ntpd in NTP before 4.2.8p9, when running on Windows, allows …
• CVE-2016-9313security/keys/big_key.c in the Linux kernel before 4.8.7 mis…7.8
• CVE-2016-9315Privilege Escalation Vulnerability in com.trend.iwss.gui.ser…
• CVE-2016-9316Multiple stored Cross-Site-Scripting (XSS) vulnerabilities i…
• CVE-2016-9317The gdImageCreate function in the GD Graphics Library (aka l…
• CVE-2016-9318libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earl…5.5
• CVE-2016-9319There is Missing SSL Certificate Validation in the Trend Mic…
• CVE-2016-9322Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…