Microsoft Exchange Server Outlook Web Access Cross Site Request Forgery Vulnerability

Publish date: July 21, 2015
  Severity: MEDIUM
  CVE Identifier: CVE-2010-3213
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Microsoft Exchange Server Outlook Web Access is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004279
  Trend Micro Deep Security DPI Rule Name: 1004279 - Microsoft Exchange Server Outlook Web Access Cross Site Request Forgery Vulnerability

  AFFECTED SOFTWARE AND VERSION

  • microsoft outlook_web_access 2007

Featured Stories