Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthentic
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Alps System Integration Co., Ltd. InterSafe WebFilter
prior to V9.1SP4 Build1653
- Alps System Integration Co., Ltd. InterSafe LogDirector
versions before the replacement file released on 2024 September 9
- Alps System Integration Co., Ltd. InterSafe GatewayConnection
versions before 2024 July 20 maintenance
- Alps System Integration Co., Ltd. InterSafe LogNavigator
prior to Ver.1.1.1
- Alps System Integration Co., Ltd. InterSafe CATS
versions before 2024 July 4 maintenance
- Alps System Integration Co., Ltd. InterSafe MobileSecurity
versions before 2024 August 31 maintenance
- Trend Micro Incorporated InterScan WebManager
9.0, 9.0 Service Pack 1, 9.1, 9.1 Service Pack 1, 9.1 Service Pack 2, 9.1 Service Pack 3, and 9.1 Service Pack 4
- MIROKU JYOHO SERVICE CO., LTD. MJS WebFiltering
versions before 2024 July 4 maintenance
- Hammock Corporation AssetView F
versions before 2024 July 4 maintenance
- MOTEX Inc. LANSCOPE EndpointManager WebFiltering
versions before 2024 July 4 maintenance
- AXSEED,Inc. SPPM BizBrowser
versions before 2024 June 18 maintenance
- AXSEED,Inc. SPPM Secure Filtering
versions before 2024 July 20 maintenance
- QualitySoft Corporation URL Filtering
versions before 2024 July 4 maintenance
- JMA Systems Corporation KAITO SecureBrowser
versions before 2024 July 4 maintenance