Description
Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Alps System Integration Co., Ltd. InterSafe WebFilter
prior to V9.1SP4 Build1653affected
Alps System Integration Co., Ltd. InterSafe LogDirector
versions before the replacement file released on 2024 September 9affected
Alps System Integration Co., Ltd. InterSafe GatewayConnection
versions before 2024 July 20 maintenanceaffected
Alps System Integration Co., Ltd. InterSafe LogNavigator
prior to Ver.1.1.1affected
Alps System Integration Co., Ltd. InterSafe CATS
versions before 2024 July 4 maintenanceaffected
Alps System Integration Co., Ltd. InterSafe MobileSecurity
versions before 2024 August 31 maintenanceaffected
Trend Micro Incorporated InterScan WebManager
9.0affected9.0 Service Pack 1affected9.1affected9.1 Service Pack 1affected9.1 Service Pack 2affected9.1 Service Pack 3affectedand 9.1 Service Pack 4affected
MIROKU JYOHO SERVICE CO., LTD. MJS WebFiltering
versions before 2024 July 4 maintenanceaffected
Hammock Corporation AssetView F
versions before 2024 July 4 maintenanceaffected
MOTEX Inc. LANSCOPE EndpointManager WebFiltering
versions before 2024 July 4 maintenanceaffected
AXSEED,Inc. SPPM BizBrowser
versions before 2024 June 18 maintenanceaffected
AXSEED,Inc. SPPM Secure Filtering
versions before 2024 July 20 maintenanceaffected
QualitySoft Corporation URL Filtering
versions before 2024 July 4 maintenanceaffected
JMA Systems Corporation KAITO SecureBrowser
versions before 2024 July 4 maintenanceaffected