CVE-2020-27694

概要

参考情報

• sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva · Exploit
• success.trendmicro.com/solution/000279833 · Exploit

interscan messaging security virtual appliance のその他の脆弱性

• CVE-2021-25252中 5.5Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may l…
• CVE-2020-27693中 4.4Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that is considered outda…
• CVE-2020-27019中 5.5Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could …
• CVE-2020-27018中 5.5Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vulnerability which co…
• CVE-2020-27017中 4.9Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerabilit…