CVE-2020-27016

HIGH

8.8

CVSS Severity Score

EPSS Score0.1320%

EPSS Percentile20.86th

PublishedNov 9, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.

Affected Platforms (CPE)

📦

Trendmicro

Interscan Messaging Security Virtual Appliance

<= 9.1

References & Advisories

🔗 https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/

🔗 https://success.trendmicro.com/solution/000279833