CVE-2020-8464 - A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attac

CVE-2020-8464

Summary

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access.

References

https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
https://success.trendmicro.com/solution/000283077

Vulnerable Configurations

cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:sp2:*:*:*:*:*:*
cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:sp2:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 22-12-2020 - 17:32)
Impact:
Exploitability:

CWE

CWE-918

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

misc

https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
https://success.trendmicro.com/solution/000283077

Last major update

22-12-2020 - 17:32

Published

17-12-2020 - 21:15

Last modified

22-12-2020 - 17:32