Trend Micro Patches Vulnerabilities in InterScan Messaging Security Product

guest · Nov 4, 2020

Trend Micro Patches Vulnerabilities in InterScan Messaging Security Product
November 4, 2020
https://www.securityweek.com/trend-...bilities-interscan-messaging-security-product

InterScan Messaging Security is an email and collaboration security product designed to provide protection against spam, phishing and sophisticated attacks. The product has a hybrid SaaS deployment option that combines a gateway virtual appliance with a prefilter to block spam and threats.

Researchers at cybersecurity consultancy SEC Consult discovered that the InterScan Messaging Security Virtual Appliance (IMSVA) is affected by eight types of security issues.
Click to expand...

The list includes cross-site request forgery (CSRF), XML external entity (XXE), over-privileged users and services, server-side request forgery (SSRF), local file disclosure, information disclosure, weak password storage, and outdated software components.

One of the most serious vulnerabilities is CVE-2020-27016, a high-severity CSRF issue that can be exploited to modify the product’s policy rules, which, according to SEC Consult, can allow an attacker to bypass malware checks or forward emails to a host they control.
Click to expand...

SEC Consult said it informed Trend Micro about the vulnerabilities in late April and patches were released on October 9. However, Trend Micro only issued a security bulletin on November 4.
Click to expand...

Log in or Sign up

Trend Micro Patches Vulnerabilities in InterScan Messaging Security Product

guest Guest

Log in or Sign up

Trend Micro Patches Vulnerabilities in InterScan Messaging Security Product

guest Guest

Useful Searches