QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-14956

Back to search

CVE-2017-14956

Published: Oct 18, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local download, the script also offers the possibility to send out any report via email to a given address (either in PDF or XLS format). Since there is no anti-CSRF token protecting this functionality, it is vulnerable to Cross-Site Request Forgery attacks.

VendorProductVersions

n/a

n/a

affected
n/a

References

42988
exploit
x_refsource_EXPLOIT-DB
101284
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now