CVE-2020-27016 Cross-site request forgery in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)

High 8.8 Published 9 Nov 2020 Updated 4 Aug 2024

An attacker can modify policy rules by tricking an authenticated administrator into visiting a malicious page, requiring prior admin privileges.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2020-27016?

CVE-2020-27016 is a high-severity vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA), published on 9 Nov 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.

Weakness: CWE-352

Which versions are affected by CVE-2020-27016?

It affects 1 product.

Products include Trendmicro Interscan Messaging Security Virtual Appliance.

How do I fix CVE-2020-27016?

No fix has been published for CVE-2020-27016 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-27016 being exploited?

There is no known exploitation of CVE-2020-27016 in the wild and no public exploit code.

Sources

Also known as GHSA-r87g-pphp-cg7r.