Vulnerability Description
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Interscan Web Security Virtual Appliance | 6.5 |
Related Weaknesses (CWE)
References
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabiliExploitThird Party Advisory
- https://success.trendmicro.com/solution/000283077Vendor Advisory
- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabiliExploitThird Party Advisory
- https://success.trendmicro.com/solution/000283077Vendor Advisory
FAQ
What is CVE-2020-8464?
CVE-2020-8464 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin i...
How severe is CVE-2020-8464?
CVE-2020-8464 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-8464?
Check the references section above for vendor advisories and patch information. Affected products include: Trendmicro Interscan Web Security Virtual Appliance.