Lucene search

K
cve[email protected]CVE-2011-1543
HistoryApr 29, 2011 - 10:55 p.m.

CVE-2011-1543

2011-04-2922:55:01
CWE-352
web.nvd.nist.gov
22
cve-2011-1543
cross-site request forgery
csrf
hp systems insight manager
sim
authentication hijacking
security vulnerability
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

NVD
Node
hpsystems_insight_managerRange6.2
OR
hpsystems_insight_managerMatch2.5
OR
hpsystems_insight_managerMatch2.5.2.0
OR
hpsystems_insight_managerMatch4.0
OR
hpsystems_insight_managerMatch4.0sp1
OR
hpsystems_insight_managerMatch4.1
OR
hpsystems_insight_managerMatch4.1sp1
OR
hpsystems_insight_managerMatch4.2
OR
hpsystems_insight_managerMatch4.2sp1
OR
hpsystems_insight_managerMatch4.2sp2
OR
hpsystems_insight_managerMatch5.0
OR
hpsystems_insight_managerMatch5.0sp1
OR
hpsystems_insight_managerMatch5.0sp2
OR
hpsystems_insight_managerMatch5.0sp3
OR
hpsystems_insight_managerMatch5.0sp4
OR
hpsystems_insight_managerMatch5.0sp5
OR
hpsystems_insight_managerMatch5.1
OR
hpsystems_insight_managerMatch5.2
OR
hpsystems_insight_managerMatch5.2update_1
OR
hpsystems_insight_managerMatch5.3
OR
hpsystems_insight_managerMatch5.3update_1
OR
hpsystems_insight_managerMatch6.0
OR
hpsystems_insight_managerMatch6.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

Related for CVE-2011-1543