| Description: | | A command injection vulnerability has been reported in Trend Micro InterScan Web Security Virtual Appliance (IWSVA). The vulnerability exists due to improper validation of the HTTP request parameters when processing requests with /rest/testConfiguration URI. A remote, unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the target server. Successful exploitation of this vulnerability can lead to remote command execution in the context of the process. |