ConnectWise Manage Cross-Site Request Forgery Vulnerability

ConnectWise Manage is a suite of business management solutions from ConnectWise USA. The solution provides process management, technology control and automated service delivery. A cross-site request forgery vulnerability exists in services/systemio/actionprocessor/System.rails in ConnectWise Mana...

CVE-2017-11726

services/systemio/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery CSRF, as demonstrated by changing an e-mail address setting...