[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIF0Xnnm5eXvsrdCIXgSHTsARfLIfECfhjF9KMGIR5H8":3,"g5a-risk:CVE-2021-31520":115},{"success":4,"data":5,"meta":113},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":50,"references":51,"referencesCount":50,"weaknesses":64,"weaknessesCount":73,"isActivelyExploited":74,"cisaInfo":25,"otxData":25,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":111,"notableEvents":112},"CVE-2021-31520","What is CVE-2021-31520?","A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface.","A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in...","2021-05-10T11:15:08.003","2021-05-19T18:25:09.457",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":33,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.03901,[38,38,38,38,38,38,38],"High",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"trendmicro","im_security","1.6","cpe:2.3:a:trendmicro:im_security:1.6:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"1.6.5","cpe:2.3:a:trendmicro:im_security:1.6.5:*:*:*:*:*:*:*",2,[52,58],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fsuccess.trendmicro.com\u002Fsolution\u002F000286439","Trendmicro",[56,57],"Patch","Vendor Advisory",{"url":59,"source":60,"tags":61},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-21-525\u002F","Zerodayinitiative",[62,63],"Third Party Advisory","VDB Entry",[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2021-31520? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-31520, a high severity cyber security vulnerability from 2021. A weak session token authentication bypass vulnerability in...","CVE-2021-31520, CVE-2021-31520 vulnerability, CVE-2021-31520 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, trendmicro security, im_security vulnerability","\u002Fwhat-is\u002Fcve-2021-31520",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-31520","Cybersecurity","CVE-2021-31520, CVE-2021-31520 vulnerability, CVE-2021-31520 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":25,"Negate":25,"Nodes":103},[104],{"Operator":105,"Negate":25,"CPEMatch":106},"OR",[107,109],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":108,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"1703CAB2-FC48-4674-9C3D-DE1ED5C2484F",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":110,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"DF864E42-A053-4693-BCC3-B2F67A5F85E9",[],[],{"lastModified":11,"cacheTime":114,"version":31},1792479065195,{"score":116,"band":117,"action":118,"scoredAt":119},47,"Medium","Plan remediation","2026-10-20T06:45:38.798921+00:00"]