CVE-2020-27013

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 (Consumer)

Description The issue occurs due to improper access control in the product's webserver API, allowing an attacker to read and write sensitive product and user data. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system.

Recommendations For Trend Micro Antivirus for Mac 2020 (Consumer), consider restricting access to the webserver API until a patch is available. As a temporary workaround, limit the ability to execute low-privileged code on the target system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.