Skip to main content

Im Security

1 CVEs product

Monthly

CVE-2021-31520 May 10, 11:15 HIGH PATCH This Week

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Trend Micro Im Security
NVD
CVSS 3.1
8.1
EPSS
3.9%
EPSS 4% CVSS 8.1
HIGH PATCH This Week

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Trend Micro Im Security
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy