Lucene search

K
nvd[email protected]NVD:CVE-2010-3989
HistoryOct 28, 2010 - 8:00 p.m.

CVE-2010-3989

2010-10-2820:00:02
CWE-352
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.9%

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

NVD
Node
hpinsight_control_virtual_machine_managementRange6.1.2
OR
hpinsight_control_virtual_machine_managementMatch6.0
OR
hpinsight_control_virtual_machine_managementMatch6.0.1
OR
hpinsight_control_virtual_machine_managementMatch6.0.2
OR
hpinsight_control_virtual_machine_managementMatch6.1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.9%

Related for NVD:CVE-2010-3989