PT-2017-17001

CVE-2017-6328

·

Published

2017-08-11

·

Updated

2017-08-24

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.6.3-267
Description The issue is related to cross-site request forgery (CSRF or XSRF), also known as a one-click attack. This is a type of malicious exploit where unauthorized commands are transmitted from a user that the web application trusts. A CSRF attack attempts to exploit the trust that a specific website has in a user's browser.
Recommendations For versions prior to 10.6.3-267, update to version 10.6.3-267 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾