Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-8464

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access.

Published

2020-12-17T21:15:13.023

Last Modified

2024-11-21T05:38:53.463

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-918

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	trendmicro	interscan_web_security_virtual_appliance	6.5	Yes

References

https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/ Exploit, Third Party Advisory ([email protected])
https://success.trendmicro.com/solution/000283077 Vendor Advisory ([email protected])
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/ Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://success.trendmicro.com/solution/000283077 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)