CVE-2021-31520
CVE-2021-31520
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 3.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 May 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface.
Affected products
Trend Micro · Trend Micro IM SecurityWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →