Cross-Site Request Forgery in Trend Micro InterScan Messaging Security Virtual Appliance

CVE-2020-27016

Summary

The Trend Micro InterScan Messaging Security Virtual Appliance version 9.1 is susceptible to a cross-site request forgery (CSRF) that enables an attacker to manipulate policy rules. This is accomplished by deceiving an authenticated administrator into interacting with a malicious webpage controlled by the attacker. To exploit this vulnerability, the attacker must first have gained administrative root privileges on the affected system.

References