CVE-2017-14956

CVE-2017-14956 is a Cross-Site Request Forgery (CSRF) vulnerability affecting AlienVault USM v5.4.2 and earlier. Authenticated users can be tricked into exporting sensitive reports via email due to the lack of an anti-CSRF token in the report export functionality. Rated as MEDIUM severity with a CVSS score of 5.7, this vulnerability requires user interaction and a low-privileged account to exploit, potentially leading to unauthorized disclosure of sensitive information (C:H). The attack complexity is low, as it can be carried out over a network. While not actively exploited in the wild and not listed on the KEV catalog, exploit code is publicly available on ExploitDB. There is minimal community discussion or media coverage surrounding this CVE.