[security bulletin] HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549477 Version: 1 HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery CSRF, Cross Site Scripting XSS, Privilege...

CVE-2010-3289

HP Systems Insight Manager (SIM) prior to version 6.2 is affected by CVE-2010-3289, a remote XSS vulnerability that could allow an attacker to inject arbitrary web script or HTML via unspecified vectors. The HP security bulletin summarizes the impact as XSS with no confidentiality/availability co...