CVE-2017-14092
HighSummary
The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.
Risk Assessment
The organization may be exposed to unauthorized actions within the system, potentially leading to data loss or system integrity breaches.
Recommendation
It is recommended to implement Anti-CSRF tokens in web interface forms and regularly update the software to eliminate known vulnerabilities.
Other vulnerabilities in Trend Micro ScanMail for Exchange 12.0
See all- CVE-2017-14091High
A vulnerability in Trend Micro ScanMail for Exchange 12.0 allows overwriting sensitive files in the ScanMail for Exchange directory for certain specific installations utilizing an uncommon feature - Other Update Sources.
- CVE-2017-14090Critical
A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.
Original NVD description (English source)
The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.