CVE-2020-8606 — Improper Authentication in Micro Interscan WEB Security Virtual Appliance

CWE-287 — Improper Authentication3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
89.6%
top 0.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trend Micro Interscan WEB Security Virtual ApplianceTrendmicro Interscan WEB Security Virtual Appliance
Timeline
PublishedMay 27
Latest updateMay 24

Description

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

Patches

Patch: success.trendmicro.com ↗Patch: success.trendmicro.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-crg8-779p-h56q: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6↗2022-05-24
▶
CVEList
CVE-2020-8606: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6↗2020-05-27
▶
CVE-2020-8606 — Improper Authentication in Trend | cvebase