PT-2024-31666 · Intersafe+1 · Intersafe Webfilter+1

Yoshiaki Komeyama · Published 2024-09-09 · Updated 2024-11-04 · CVE-2024-45504

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Alps System Integration products (affected versions not specified) InterSafe WebFilter (affected versions not specified)

Description: A cross-site request forgery (CSRF) issue allows a remote unauthenticated attacker to hijack the authentication of the user and perform unintended operations if the user views a malicious page while logged in. This can lead to unauthorized actions.

Recommendations: For Alps System Integration products, upgrade the affected component as soon as possible to mitigate the risk. For InterSafe WebFilter, upgrade the affected component as soon as possible to mitigate the risk. As a temporary workaround, consider restricting access to sensitive operations while logged in to minimize the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-45504

Affected Products

Alps System Integration

Intersafe Webfilter

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-45504 · Security Note
• https://twitter.com/VulmonFeeds/status/1833482942443602199 · Twitter Post
• https://twitter.com/oktsec/status/1833418686842998912 · Twitter Post
• https://jvn.jp/en/jp/JVN05579230 · Note
• https://twitter.com/CVEnew/status/1833367587394052120 · Twitter Post
• https://motex.co.jp/news/notice/2024/release240909 · Note
• https://t.me/cvedetector/5164 · Telegram Post
• https://success.trendmicro.com/ja-JP/solution/KA-0017618 · Note
• https://alsifaq.dga.jp/faq_detail.html?id=6494 · Note