Authentication Bypass in Trend Micro InterScan Web Security Virtual Appliance

CVE-2019-9490

Summary

A vulnerability in Trend Micro's InterScan Web Security Virtual Appliance version 6.5 SP2 allows an authenticated non-authorized user to potentially disclose administrative credentials. Exploitation of this flaw enables attackers, already logged in to the system, to gain unauthorized access to sensitive administrative information, thereby compromising the security of the web environment. It's critical for users of this software to apply recommended security updates and closely monitor access logs for any suspicious activities.

References