CVE-2020-8461

A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token.

Score

CVSS 3.1 8.8 High

Status

Modified - security@trendmicro.com

Published

2020-12-17

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Trend Micro Interscan Web Security Virtual Appliance (Trend Micro)
• Interscan Web Security Virtual Appliance (Trendmicro)

References

• https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-secur…
• https://success.trendmicro.com/solution/000283077