What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2021-31520.

What is the severity level of CVE-2021-31520?

The severity level of CVE-2021-31520 is high (8.1).

How does CVE-2021-31520 impact Trend Micro IM Security?

CVE-2021-31520 allows remote attackers to bypass authentication on affected installations of Trend Micro IM Security.

Is authentication required to exploit CVE-2021-31520?

No, authentication is not required to exploit CVE-2021-31520.

How can I fix CVE-2021-31520?

To fix CVE-2021-31520, it is recommended to update to a patched version of Trend Micro IM Security.

Vulnerability/
CVE-2021-31520

high

8.1

CWE

287

10/5/2021

3/8/2024

CVE-2021-31520: Trend Micro IM Security Weak Session Token Authentication Bypass Vulnerability

First published: Mon May 10 2021(Updated: )

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface.

Credit: security@trendmicro.com

Affected Software	Affected Version	How to fix
Trendmicro Im Security	=1.6
Trendmicro Im Security	=1.6.5

Remedy

https://success.trendmicro.com/solution/000286439

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-31520.
What is the severity level of CVE-2021-31520?
The severity level of CVE-2021-31520 is high (8.1).
How does CVE-2021-31520 impact Trend Micro IM Security?
CVE-2021-31520 allows remote attackers to bypass authentication on affected installations of Trend Micro IM Security.
Is authentication required to exploit CVE-2021-31520?
No, authentication is not required to exploit CVE-2021-31520.
How can I fix CVE-2021-31520?
To fix CVE-2021-31520, it is recommended to update to a patched version of Trend Micro IM Security.

agent/type
agent/references
collector/nvd-index
agent/software-canonical-lookup-request
agent/title
agent/weakness
agent/severity
agent/remedy
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/softwarecombine
collector/zdi-advisory
source/ZDI
alias/ZDI-21-525
alias/ZDI-CAN-12023
alias/CVE-2021-31520
agent/software-canonical-lookup
agent/tags
agent/event
agent/trending
vendor/trendmicro
canonical/trendmicro im security
version/trendmicro im security/1.6
version/trendmicro im security/1.6.5
vendor/trend micro
canonical/trend micro im security

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.