PT-2020-5367

CVE-2020-8604

Published

2020-05-19

Updated

2022-04-27

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance versions prior to 6.5 SP2 Patch 4 (Build 1901)

Description The issue is related to a lack of protection for service data in the Trend Micro InterScan Web Security Virtual Appliance, which may allow a remote attacker to disclose sensitive information.

Recommendations For versions prior to 6.5 SP2 Patch 4 (Build 1901), update to version 6.5 SP2 Patch 4 (Build 1901) or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers