Security Advisory

CVE-2020-27016

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-11-09 23:10:33
Last updated 2024-08-04 16:03:23
Assigner trendmicro
State PUBLISHED

Description

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.