description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass (CVE-2020-8461) and authentication bypass (CVE-2020-8464) to execute code as user root.
problem types: Command Execution
affected:
{
product: Trend Micro InterScan Web Security Virtual Appliance
vendor: Trend Micro
versions:
status: affected, version: 6.5 SP2
}