HP Insight Control Performance Management security vulnerabilities
Published:		21.04.2011
Source:		BUGTRAQ
SecurityVulns ID:		11613
Type:		remote
Level:		5/10
Description:		Crossite request forgery, privilege escalation.

Affected:		HP : Insight Control performance management 6.2
CVE:		CVE-2011-1545 (Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.)
		CVE-2011-1544 (Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors.)

Original document

HP, [security bulletin] HPSBMA02664 SSRT100417 rev.1 - HP Insight Control Performance Management for Windows, Remote Privilege Elevation, Cross Site Request Forgery (CSRF) (21.04.2011)

Discuss:

Read or add your comments to this news (0 comments)