CVE-2017-14956

CVE-2017-14956 affects AlienVault USM 5.4.2 and earlier. The vulnerability stems from lack of anti-CSRF protection on the wizard_email.php export path, enabling Cross-Site Request Forgery to trigger report export and sending via email (PDF/XLS) by an attacker-replayed authenticated action. Output...

AlienVault USM 5.4.2 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications 1. ADVISORY INFORMATION ======================= Product: AlienVault USM Vendor URL: https://www.alienvault.com Type: Cross-Site Request Forgery CWE-253 Date found: 2017-09-22 Date published: 2017-10-13 CVSSv3 Score: 6.5...

AlienVault USM 5.4.2 Cross Site Request Forgery

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AlienVault USM Vendor URL: https://www.alienvault.com Type: Cross-Site Request Forgery CWE-253 Date found: 2017-09-22 Date published: 2017-10-13 CVSSv3 Score: 6.5...