CVE-2017-14092 The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-co...
HighCVSS 8.8
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro scanmail | = 12.0 | No fix listed |
References
- success.trendmicro.com patch vendor-advisory
- www.coresecurity.com exploit third-party-advisory