CVE-2017-6340
Last modified
CVE-2017-6340 is a vulnerability of currently unknown severity. Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a 'Reports Only' user to inject malicious JavaScript while creating a new report. Additionally, IWSVA implements incorrect access control that allows any authenticated, remote user (even with low privileges like 'Auditor') to create or modify reports, and consequently take advantage of this XSS vulnerability. EPSS estimates a 2.46% chance of exploitation in the next 30 days.
Description
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a 'Reports Only' user to inject malicious JavaScript while creating a new report. Additionally, IWSVA implements incorrect access control that allows any authenticated, remote user (even with low privileges like 'Auditor') to create or modify reports, and consequently take advantage of this XSS vulnerability. The JavaScript is executed when victims visit reports or auditlog pages.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Interscan Web Security Virtual Appliance | <= 6.5 |
References
- http://www.securityfocus.com/bid/97487Third Party Advisory, VDB Entry
- https://success.trendmicro.com/solution/1116960Patch, Vendor Advisory
- https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdfExploit, Technical Description, Third Party Advisory
- http://www.securityfocus.com/bid/97487Third Party Advisory, VDB Entry
- https://success.trendmicro.com/solution/1116960Patch, Vendor Advisory
- https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdfExploit, Technical Description, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-6340?
How severe is CVE-2017-6340?
How do I fix CVE-2017-6340?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-6330Symantec Encryption Desktop before SED 10.4.1MP2 can allow r…
- CVE-2017-6331Prior to SEP 14 RU1 Symantec Endpoint Protection product can…7.1
- CVE-2017-6334dnslookup.cgi on NETGEAR DGN2200 devices with firmware throu…8.8
- CVE-2017-6335The QuantumTransferMode function in coders/tiff.c in Graphic…
- CVE-2017-6338Multiple Access Control issues in Trend Micro InterScan Web …
- CVE-2017-6339Trend Micro InterScan Web Security Virtual Appliance (IWSVA)…
- CVE-2017-6341Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.…
- CVE-2017-6342An issue was discovered on Dahua DHI-HCVR7216A-S3 devices wi…
- CVE-2017-6343The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR…
- CVE-2017-6344XML External Entity (XXE) vulnerability in Grails PDF Plugin…
- CVE-2017-6345The LLC subsystem in the Linux kernel before 4.9.13 does not…
- CVE-2017-6346Race condition in net/packet/af_packet.c in the Linux kernel…7
Are you affected by CVE-2017-6340?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST