CVE-2017-14956

CVE-2017-14956 affects AlienVault USM 5.4.2 and earlier. The vulnerability stems from lack of anti-CSRF protection on the wizard_email.php export path, enabling Cross-Site Request Forgery to trigger report export and sending via email (PDF/XLS) by an attacker-replayed authenticated action. Output...