CVE:CVE-2017-14362
CNNVD:CNNVD-201709-916
Micro Focus Project and Portfolio Management Center是英国Micro Focus公司的一套项目组合管理软件。该软件通过集成ALM Octane、Agile Manager和CA Rally等敏捷工具管理混合项目。
Micro Focus Project and Portfolio Management Center 9.32版本中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权的操作。
solution:Upgrade microfocus project_and_portfolio_management to a higher version than 9.32,and avoid the version 9.32