Description (CNA)
Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Alps System Integration Co., Ltd. / InterSafe WebFilter | affected prior to V9.1SP4 Build1653 |
| Alps System Integration Co., Ltd. / InterSafe LogDirector | affected versions before the replacement file released on 2024 September 9 |
| Alps System Integration Co., Ltd. / InterSafe GatewayConnection | affected versions before 2024 July 20 maintenance |
| Alps System Integration Co., Ltd. / InterSafe LogNavigator | affected prior to Ver.1.1.1 |
| Alps System Integration Co., Ltd. / InterSafe CATS | affected versions before 2024 July 4 maintenance |
| Alps System Integration Co., Ltd. / InterSafe MobileSecurity | affected versions before 2024 August 31 maintenance |
| Trend Micro Incorporated / InterScan WebManager | affected 9.0; affected 9.0 Service Pack 1; affected 9.1; affected 9.1 Service Pack 1; affected 9.1 Service Pack 2; affected 9.1 Service Pack 3; affected and 9.1 Service Pack 4 |
| MIROKU JYOHO SERVICE CO., LTD. / MJS WebFiltering | affected versions before 2024 July 4 maintenance |
| Hammock Corporation / AssetView F | affected versions before 2024 July 4 maintenance |
| MOTEX Inc. / LANSCOPE EndpointManager WebFiltering | affected versions before 2024 July 4 maintenance |
| AXSEED,Inc. / SPPM BizBrowser | affected versions before 2024 June 18 maintenance |
| AXSEED,Inc. / SPPM Secure Filtering | affected versions before 2024 July 20 maintenance |
| QualitySoft Corporation / URL Filtering | affected versions before 2024 July 4 maintenance |
| JMA Systems Corporation / KAITO SecureBrowser | affected versions before 2024 July 4 maintenance |
CWE
No CWE identifiers supplied.
References
- https://alsifaq.dga.jp/faq_detail.html?id=6494
- https://success.trendmicro.com/ja-JP/solution/KA-0017618
- https://www.motex.co.jp/news/notice/2024/release240909/
- https://jvn.jp/en/jp/JVN05579230/
ADP enrichment
No English description supplied.
No references supplied.