CVE-2010-1037

Description

Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected products

• HP / systems_insight_manager
• HP / systems_insight_manager5.2
• HP / systems_insight_manager2.5 – 2.5
• HP / systems_insight_manager2.5.2.0 – 2.5.2.0
• HP / systems_insight_manager4.0 – 4.0
• HP / systems_insight_manager4.0 – 4.0
• HP / systems_insight_manager4.1 – 4.1
• HP / systems_insight_manager4.1 – 4.1
• HP / systems_insight_manager4.2 – 4.2
• HP / systems_insight_manager4.2 – 4.2
• HP / systems_insight_manager4.2 – 4.2
• HP / systems_insight_manager5.0 – 5.0
• HP / systems_insight_manager5.0 – 5.0
• HP / systems_insight_manager5.0 – 5.0
• HP / systems_insight_manager5.0 – 5.0
• HP / systems_insight_manager5.0 – 5.0
• HP / systems_insight_manager5.0 – 5.0
• HP / systems_insight_manager5.1 – 5.1
• HP / systems_insight_manager5.2 – 5.2

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=127239985506823&w=2
• MISChttp://securitytracker.com/id?1023927
• VENDOR_ADVISORYhttp://secunia.com/advisories/39645
• MISChttp://www.securityfocus.com/bid/39736
• MAILING_LISThttp://marc.info/?l=bugtraq&m=127239985506823&w=2