CVE-2018-6224 Cross-site request forgery in Trend Micro Email Encryption Gateway
An attacker can trick authenticated users into submitting requests to the Trend Micro Email Encryption Gateway, potentially modifying data or taking over accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-6224?
CVE-2018-6224 is a high-severity vulnerability in Trend Micro Email Encryption Gateway, published on 15 Mar 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit authenticated requests to a user browsing an attacker-controlled domain.
Weakness: CWE-352
Which versions are affected by CVE-2018-6224?
It affects 1 product.
Products include Trendmicro Email Encryption Gateway.
How do I fix CVE-2018-6224?
No fix has been published for CVE-2018-6224 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-6224 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-6224 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Trend Micro Email Encryption Gateway
- CVE-2018-6220 File upload in Trend Micro Email Encryption Gateway
- CVE-2018-6223 Missing authorization in Trend Micro Email Encryption Gateway
- CVE-2018-6228 SQL injection in Trend Micro Email Encryption Gateway
- CVE-2018-6229 SQL injection in Trend Micro Email Encryption Gateway
- CVE-2016-4351 SQL injection in n/a
Sources
Also known as GHSA-xf8p-94qq-rf9f.