CSRF in HP Insight Management Agents
CVE-2012-2003
Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.019 (77.4th percentile) — read the EPSS interpretation.
Affected products
- Hp Insight_management_agents — versions 6.30.0.0, 6.31.0.0, 6.40.0.0
- Microsoft Windows_2003_server
- Microsoft Windows_server_2003
- Microsoft Windows_server_2008
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (vdb-entry, x_refsource_BID)
- hp-security-alert@hp.com (x_refsource_OSVDB, vdb-entry)
- hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)