CVE-2020-27016

CVE-2020-27016 describes a Cross-Site Request Forgery (CSRF) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1. An attacker could exploit this by tricking an authenticated administrator into visiting a malicious webpage, allowing them to modify policy rules. This vulnerability has a CVSS score of 8.8 (High), indicating a high impact on confidentiality, integrity, and availability, with a network attack vector and low attack complexity, though it requires administrator privileges for exploitation. There is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei, despite some community discussion and media coverage.