david.vorel has reported a vulnerability in Trend Micro InterScan Web Security Suite and Trend Micro InterScan Web Security Virtual Appliance, which can be exploited by malicious people to disclose sensitive information.

The vulnerability is caused due to the application forwarding the "Proxy-Authorization" header to third-party websites when basic authorization is enabled. This can be exploited to disclose the proxy username and password by tricking a user into connecting to an external resource using e.g. Windows Media Player.

Solution
Do not browse untrusted websites or follow untrusted links.

Provided and/or discovered by
david.vorel

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers