CVE-2020-8465: CSRF
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass (CVE-2020-8461) and authentication bypass (CVE-2020-8464) to execute code as user root.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-8465?
CVE-2020-8465 is a vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 that could allow an attacker to execute code as user root.
How severe is CVE-2020-8465?
CVE-2020-8465 has a severity rating of 9.8, which is considered critical.
What software is affected by CVE-2020-8465?
The affected software is Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2.
How can an attacker exploit CVE-2020-8465?
An attacker can exploit CVE-2020-8465 by manipulating system updates using CSRF bypass (CVE-2020-8461) and authentication bypass (CVE-2020-8464) to execute code as user root.
Are there any references for CVE-2020-8465?
Yes, you can find more information about CVE-2020-8465 at the following references: [Link 1](https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/) and [Link 2](https://success.trendmicro.com/solution/000283077).