Severity: : Medium
  CVE Kennungen: : CVE-2010-3213
  Advisory Date: 21 lipca 2015

  DESCRIPTION

Microsoft Exchange Server Outlook Web Access is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.

  INFORMATION EXPOSURE

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004279
  Trend Micro Deep Security DPI Rule Name: 1004279 - Microsoft Exchange Server Outlook Web Access Cross Site Request Forgery Vulnerability

  AFFECTED SOFTWARE AND VERSION:

  • microsoft outlook_web_access 2007