CVE-2010-3989

2010-10-2820:00:02

CWE-352

[email protected]

web.nvd.nist.gov

cve-2010-3989

csrf

hp insight control

virtual machine management

remote attackers

authentication hijacking

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.001

Percentile

49.8%

JSON

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

Nvd

Node

hpinsight_control_virtual_machine_managementRange≤6.1.2

hpinsight_control_virtual_machine_managementMatch6.0

hpinsight_control_virtual_machine_managementMatch6.0.1

hpinsight_control_virtual_machine_managementMatch6.0.2

hpinsight_control_virtual_machine_managementMatch6.1

VendorProductVersionCPE
hpinsight_control_virtual_machine_management*cpe:2.3:a:hp:insight_control_virtual_machine_management:*:*:*:*:*:*:*:*
hpinsight_control_virtual_machine_management6.0cpe:2.3:a:hp:insight_control_virtual_machine_management:6.0:*:*:*:*:*:*:*
hpinsight_control_virtual_machine_management6.0.1cpe:2.3:a:hp:insight_control_virtual_machine_management:6.0.1:*:*:*:*:*:*:*
hpinsight_control_virtual_machine_management6.0.2cpe:2.3:a:hp:insight_control_virtual_machine_management:6.0.2:*:*:*:*:*:*:*
hpinsight_control_virtual_machine_management6.1cpe:2.3:a:hp:insight_control_virtual_machine_management:6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	insight_control_virtual_machine_management	*	cpe:2.3:a:hp:insight_control_virtual_machine_management::::::::
hp	insight_control_virtual_machine_management	6.0	cpe:2.3:a:hp:insight_control_virtual_machine_management:6.0:::::::*
hp	insight_control_virtual_machine_management	6.0.1	cpe:2.3:a:hp:insight_control_virtual_machine_management:6.0.1:::::::*
hp	insight_control_virtual_machine_management	6.0.2	cpe:2.3:a:hp:insight_control_virtual_machine_management:6.0.2:::::::*
hp	insight_control_virtual_machine_management	6.1	cpe:2.3:a:hp:insight_control_virtual_machine_management:6.1:::::::*