CSRF in Hp Service Manager
CVE-2014-2633
Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.
Affected products
- Hp Service_manager — versions 7.21, 9.21, 9.30
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (vdb-entry, x_refsource_BID)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
- hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
- hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)