Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit authenticated requests to a user browsing an attacker-controlled domain.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Trend Micro Email Encryption Gateway 跨站请求伪造漏洞
Vulnerability Description
Trend Micro Email Encryption是美国趋势科技(Trend Micro)公司的一套基于身份的具有电子邮件加密功能的解决方案。Trend Micro Email Encryption Gateway(TMEEG)是其中的一个提供数据保护的网关产品。 TMEEG 5.5 Build 1111及之前版本中存在跨站请求伪造漏洞,该漏洞源于程序没有正确的验证用户提交的输入。远程攻击者可通过诱使用户访问恶意的网站利用该漏洞执行未授权的操作。
CVSS Information
N/A
Vulnerability Type
N/A