CVE-2020-27013

MEDIUM

Trend Micro Antivirus for Mac 2020 (Consumer) - Info Disclosure

Title source: llm
STIX 2.1

Description

Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-20-1243/

Scores

CVSS v3 4.4
EPSS 0.0010
EPSS Percentile 27.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Details

Status published
Products (1)
trendmicro/antivirus 2020
Published Oct 14, 2020
Tracked Since Feb 18, 2026