Microsoft Exchange Server Outlook Web Access Cross Site Request Forgery Vulnerability
Severity: MEDIUM
CVE Identifier: CVE-2010-3213
Advisory Date: JUL 21, 2015
DESCRIPTION
Microsoft Exchange Server Outlook Web Access is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1004279
Trend Micro Deep Security DPI Rule Name: 1004279 - Microsoft Exchange Server Outlook Web Access Cross Site Request Forgery Vulnerability
AFFECTED SOFTWARE AND VERSION
- microsoft outlook_web_access 2007