Description (CNA)
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts. A CSRF attack attempts to exploit the trust that a specific website has in a user's browser.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Symantec Corporation / Messaging Gateway | affected All versions prior to version 10.6.3-267 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/100136
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00
ADP enrichment
No English description supplied.