Description
Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Alps System Integration | InterSafe WebFilter | prior to V9.1SP4 Build1653 | — |
| Alps System Integration | InterSafe LogDirector | versions before the replacement file released on 2024 September 9 | — |
| Alps System Integration | InterSafe GatewayConnection | versions before 2024 July 20 maintenance | — |
| Alps System Integration | InterSafe LogNavigator | prior to Ver.1.1.1 | — |
| Alps System Integration | InterSafe CATS | versions before 2024 July 4 maintenance | — |
| Alps System Integration | InterSafe MobileSecurity | versions before 2024 August 31 maintenance | — |
| Trend Micro | InterScan WebManager | 9.0, 9.0 Service Pack 1, 9.1, 9.1 Service Pack 1, 9.1 Service Pack 2, 9.1 Service Pack 3, and 9.1 Service Pack 4 | — |
| MIROKU JYOHO SERVICE | MJS WebFiltering | versions before 2024 July 4 maintenance | — |
| Hammock | AssetView F | versions before 2024 July 4 maintenance | — |
| MOTEX | LANSCOPE EndpointManager WebFiltering | versions before 2024 July 4 maintenance | — |
| AXSEED,Inc. | SPPM BizBrowser | versions before 2024 June 18 maintenance | — |
| AXSEED,Inc. | SPPM Secure Filtering | versions before 2024 July 20 maintenance | — |
| QualitySoft | URL Filtering | versions before 2024 July 4 maintenance | — |
| JMA Systems | KAITO SecureBrowser | versions before 2024 July 4 maintenance | — |