critical9.8
CVE-2020-8465
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSR…
Impact
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass (CVE-2020-8461) and authentication bypass (CVE-2020-8464) to execute code as user root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Interscan Web Security Virtual Appliance | Version 6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
- https://success.trendmicro.com/solution/000283077
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
- https://success.trendmicro.com/solution/000283077