CVEvulnerability
CVE-2020-8464
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-12-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-918
Description
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access.
Affected configurations
• trendmicro interscan web security virtual appliance 6.5
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/ Exploit, Third Party Advisory
- https://success.trendmicro.com/solution/000283077 Vendor Advisory
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/ Exploit, Third Party Advisory
- https://success.trendmicro.com/solution/000283077 Vendor Advisory