A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access.
References
| Link | Resource |
|---|---|
| https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/ | Exploit Third Party Advisory |
| https://success.trendmicro.com/solution/000283077 | Vendor Advisory |
| https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/ | Exploit Third Party Advisory |
| https://success.trendmicro.com/solution/000283077 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/ - Exploit, Third Party Advisory | |
| References | () https://success.trendmicro.com/solution/000283077 - Vendor Advisory |
Information
Published : 2020-12-17 21:15
Updated : 2024-11-21 05:38
NVD link : CVE-2020-8464
Mitre link : CVE-2020-8464
CVE.ORG link : CVE-2020-8464
JSON object : View
Products Affected
trendmicro
- interscan_web_security_virtual_appliance
CWE
CWE-918
Server-Side Request Forgery (SSRF)