CVE-2017-6338 json
Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, r…
published 2017-04-05 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-15399
- cvss
- 6.5
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.9%
- EPSS 3.9% chance of exploitation in 30 days, percentile 90%
- public exploits
- 1
- Exploit-DB
Summary
Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption Certificate and Private Key.
Patch / fix
Timeline
- First public exploit (EDB-42013)
- Published
Exploit prediction
3.92% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-42013 Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities webapps, 2017-01-12
- qualys.com https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 6.5 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-732 Incorrect Permission Assignment for Critical Resource
References
-
success.trendmicro.com
/solution/1116960
patch, vendor-advisory
-
qualys.com
/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf
exploit, technical-description, third-party-advisory
-
securityfocus.com
/bid/97482
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2017-6338
- NVD CVE-2017-6338
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.