[security bulletin] HPSBMA02603 SSRT100319 rev.1 - HP Insight Control Power Management for Windows, Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02564294 Version: 1 HPSBMA02603 SSRT100319 rev.1 - HP Insight Control Power Management for Windows, Remote Cross Site Scripting XSS, Cross Site Request Forgery CSRF NOTICE: The information in thi...

CVE-2010-4024

Cross-site request forgery CSRF vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4023

CVE-2010-4023 affects HP Insight Control Power Management for Windows (before version 6.2). The vulnerability is a remote Cross-Site Scripting (XSS) issue that could allow an attacker to inject arbitrary web script or HTML via unspecified vectors. HP’s Security Bulletin HPSBMA02603 rev.1 states t...

PT-2010-5240

Name of the Vulnerable Software and Affected Versions HP Insight Control Power Management versions prior to 6.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 6.2, update to...

CVE-2010-4024: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2010-5239

Name of the Vulnerable Software and Affected Versions HP Insight Control Power Management versions prior to 6.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors, potentially leading to the...

CVE-2010-4023: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

HP Insight Control Power Management < 6.1 Local Unauthorized Access

The version of HP Insight Control Power Management installed on the remote host is earlier than 6.1. Such versions have an unspecified local security bypass vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47780; scriptversion"1.10"; scriptcvsdate"Date:...

HP Insight Control Power Management Detection

HP Insight Control power management is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47779; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"HP Insight Control Power...