CVE-2019-9596

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...

CVE-2019-9597

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...

CVE-2019-9597

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...

CVE-2019-9596

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...

CVE-2019-9596

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...

CVE-2019-9597

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...

Cross site request forgery (csrf)

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...

Darktrace Enterprise Immune System 3.0.9 / 3.0.10 Cross Site Request Forgery Vulnerability

Darktrace Enterprise Immune System versions 3.0.9 and 3.0.10 contain multiple cross site request forgery vulnerabilities. It is highly likely that older versions are affected as well, but this has not been confirmed. An attacker can whitelist domains and/or change core Darktrace configuration. 1 ...