CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

CVE-2010-3213

CVE-2010-3213 is a CSRF in Microsoft Outlook Web Access (OWA) for Exchange Server 2007–SP2. The vulnerability allows an authenticated user to be tricked into performing Outlook actions (e.g., creating or modifying outbound rules) via forged requests, hijacking the user’s session in the OWA contex...