CVE-2012-2996

CVE-2012-2996 affects Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394. The vulnerability is a Cross-Site Request Forgery (CSRF) in saveAccountSubTab.imss that enables exploitation via a saveAuth action to hijack administrator authentication and create new admin accounts. Root ...

PT-2012-4422

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Suite version 7.1-Build Win32 1394 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for creating admin accounts via a saveAuth acti...