CVE-2020-27018

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) version 9.1

Description The issue allows an authenticated attacker to abuse the product's web server, granting access to web resources or parts of local files. An attacker must already have obtained authenticated privileges on the product to exploit this issue.

Recommendations For Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) version 9.1, consider restricting access to the web server until a patch is available. As a temporary workaround, limit the privileges of authenticated users to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.