Saturday, December 16, 2017

CVE-2017-14092

Description. The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain. Source: MITRE Last Modified: 12/15/2017 ...

from Google Alert - vulnerability http://ift.tt/2k1XrOR
via IFTTT

No comments:

Post a Comment