[security bulletin] HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549477 Version: 1 HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery CSRF, Cross Site Scripting XSS, Privilege...

CVE-2010-3288

HP Systems Insight Manager (SIM) before version 6.2 is affected by CVE-2010-3288: a remote CSRF vulnerability that could allow an attacker to hijack the authentication of unspecified victims. The HP security bulletin (HPSBMA02591) notes that HP SIM versions prior to 6.2 for HP-UX, Linux, and Wind...

CVE-2010-3288

Cross-site request forgery CSRF vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...