CVE-2016-9314 Information disclosure in n/a

High 7.8 Published 21 Feb 2017 Updated 6 Aug 2024

Authenticated users can download system backups containing sensitive credentials and keys from Trend Micro IWSVA.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2016-9314?

CVE-2016-9314 is a high-severity vulnerability in n/a, published on 21 Feb 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to backup the system configuration and download it onto their local machine. This backup file contains sensitive information like passwd/shadow files, RSA certificates, Private Keys and Default Passphrase, etc. This was resolved in Version 6.5 CP 1737.

Weakness: CWE-200

Which versions are affected by CVE-2016-9314?

It affects 1 product.

Products include Trendmicro Interscan Web Security Virtual Appliance.

How do I fix CVE-2016-9314?

No fix has been published for CVE-2016-9314 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-9314 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-9314 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-j743-r2wr-w26p.