Lucene search

[email protected]CVE-2012-2003

HistoryMay 02, 2012 - 10:55 p.m.

CVE-2012-2003

2012-05-0222:55:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2012-2003

csrf

vulnerability

hp insight management agents

windows server

remote attackers

authentication

nvd

7.2 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.0%

JSON

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CPENameOperatorVersion
hp:insight_management_agentshp insight management agentsle8.70.0.0
hp:insight_management_agentshp insight management agentseq6.30.0.0
hp:insight_management_agentshp insight management agentseq6.31.0.0
hp:insight_management_agentshp insight management agentseq6.40.0.0
hp:insight_management_agentshp insight management agentseq7.0.0.0
hp:insight_management_agentshp insight management agentseq7.10.0.0
hp:insight_management_agentshp insight management agentseq7.20.0.0
hp:insight_management_agentshp insight management agentseq7.30.0.0
hp:insight_management_agentshp insight management agentseq7.40.0.0
hp:insight_management_agentshp insight management agentseq7.40.1.0

CPE	Name	Operator	Version
hp:insight_management_agents	hp insight management agents	le	8.70.0.0
hp:insight_management_agents	hp insight management agents	eq	6.30.0.0
hp:insight_management_agents	hp insight management agents	eq	6.31.0.0
hp:insight_management_agents	hp insight management agents	eq	6.40.0.0
hp:insight_management_agents	hp insight management agents	eq	7.0.0.0
hp:insight_management_agents	hp insight management agents	eq	7.10.0.0
hp:insight_management_agents	hp insight management agents	eq	7.20.0.0
hp:insight_management_agents	hp insight management agents	eq	7.30.0.0
hp:insight_management_agents	hp insight management agents	eq	7.40.0.0
hp:insight_management_agents	hp insight management agents	eq	7.40.1.0

Rows per page:

1-10 of 321

References

osvdb.org/81666

secunia.com/advisories/49054

www.securityfocus.com/archive/1/522548

www.securityfocus.com/bid/53341

www.securitytracker.com/id?1027003

exchange.xforce.ibmcloud.com/vulnerabilities/75312

7.2 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.0%

JSON

Related for CVE-2012-2003

prion1 cvelist1 nessus1 securityvulns2