[security bulletin] HPSBMA02550 SSRT100170 rev.2 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02282377 Version: 2 HPSBMA02550 SSRT100170 rev.2 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cross Site Request Forgery CSRF NOTICE: The information in...

CVE-2010-1971

Cross-site request forgery CSRF vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968...

CVE-2010-1968

CVE-2010-1968 is a CSRF vulnerability in HP Insight Software Installer for Windows, fixed in version 6.1+. The flaw allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Affected software: HP Insight Software Installer for Windows prior to v6.1. The HP s...