HP Performance Insight Remote Information Disclosure Vulnerability

HP Performance Insight is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1545

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-1544

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Code injection

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2011-1545

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-1544

HP Insight Control Performance Management (Windows) before version 6.3 is affected by CVE-2011-1544 (remote authenticated privilege elevation) and CVE-2011-1545 (CSRF). The documented root cause is an unspecified vulnerability that could allow remote authenticated users to gain elevated privilege...

CVE-2011-1545

HP Insight Control Performance Management for Windows is affected by CVE-2011-1545 (CSRF) prior to v6.3. The vulnerability could allow remote attackers to hijack authentication and perform actions with the user’s privileges. The HP security bulletin indicates upgrade to v6.3 or later as the mitig...

CVE-2011-1544

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2011-1544: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2011-1545: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2011-3206

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified...

PT-2011-3205

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.3 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For versions prior to 6.3, update to version 6.3 or later to resolv...

CVE-2011-1536

Unspecified vulnerability in HP Performance Insight 5.0, 5.1x. 5.2x, 5.3x, 5.4, 5.41, and 5.41.002 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2011-1542

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1543

Cross-site request forgery CSRF vulnerability in HP Systems Insight Manager SIM before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Code injection

Unspecified vulnerability in HP Insight Control for Linux aka IC-Linux before 6.3 allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in HP Performance Insight 5.0, 5.1x. 5.2x, 5.3x, 5.4, 5.41, and 5.41.002 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2011-1535

Unspecified vulnerability in HP Insight Control for Linux aka IC-Linux before 6.3 allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...