CVE-2024-45504: falha de média gravidade em Alps System Integration Co., Ltd. InterSafe CATS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Produtos afetados
Alps System Integration Co., Ltd. · InterSafe CATSAlps System Integration Co., Ltd. · InterSafe GatewayConnectionAlps System Integration Co., Ltd. · InterSafe LogDirectorAlps System Integration Co., Ltd. · InterSafe LogNavigatorAlps System Integration Co., Ltd. · InterSafe MobileSecurityAlps System Integration Co., Ltd. · InterSafe WebFilterAXSEED,Inc. · SPPM BizBrowserAXSEED,Inc. · SPPM Secure FilteringHammock Corporation · AssetView FJMA Systems Corporation · KAITO SecureBrowserMIROKU JYOHO SERVICE CO., LTD. · MJS WebFilteringMOTEX Inc. · LANSCOPE EndpointManager WebFilteringQualitySoft Corporation · URL FilteringTrend Micro Incorporated · InterScan WebManager