CVE-2020-8463: Path Traversal

Published Dec 17, 2020

Updated

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths.

Affected Software

1 affected component

trendmicro Interscan Web Security Virtual Appliance=6.5-sp2

Event History

Dec 17, 2020

CVE Published

via MITRE·09:05 PM

Data Sourced

via MITRE·09:05 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-8463?

CVE-2020-8463 is a vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 that could allow an attacker to bypass a global authorization check for anonymous users.

How severe is CVE-2020-8463?

CVE-2020-8463 has a high severity rating with a score of 7.5.

What software is affected by CVE-2020-8463?

CVE-2020-8463 affects Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2.

How can an attacker exploit CVE-2020-8463?

An attacker can exploit CVE-2020-8463 by manipulating request paths to bypass the global authorization check for anonymous users.

Is there a fix for CVE-2020-8463?

Yes, Trend Micro has provided a solution to fix the vulnerability. Please refer to the provided references for more details.