VULNERABILITY INTELLIGENCE
CVE-2009-0612
CVSS score4.3 MEDIUM
EPSS probability2.17%
CISA KEVNot currently listed
Published2009-02-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor