12 matches found
CVE-2019-9596
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
CVE-2019-9597
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
CVE-2019-9596
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
CVE-2019-9597
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
CVE-2019-9596
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
CVE-2019-9597
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
Cross site request forgery (csrf)
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
CVE-2019-9597: Cross-Site Request Forgery (CSRF)
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
CVE-2019-9596: Cross-Site Request Forgery (CSRF)
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
PT-2019-19737
Name of the Vulnerable Software and Affected Versions Darktrace Enterprise Immune System versions prior to 3.1 Description The issue allows for CSRF via the "/config" endpoint. Recommendations For versions prior to 3.1, update to version 3.1 or later to resolve the issue...
PT-2019-19736
Name of the Vulnerable Software and Affected Versions Darktrace Enterprise Immune System versions prior to 3.1 Description The issue allows for CSRF via the "whitelisteddomains" endpoint. Recommendations For versions prior to 3.1, update to version 3.1 or later to resolve the issue...
Darktrace Enterprise Immune System 3.0.9 / 3.0.10 Cross Site Request Forgery Vulnerability
Darktrace Enterprise Immune System versions 3.0.9 and 3.0.10 contain multiple cross site request forgery vulnerabilities. It is highly likely that older versions are affected as well, but this has not been confirmed. An attacker can whitelist domains and/or change core Darktrace configuration. 1 ...