[security bulletin] HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549477 Version: 1 HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery CSRF, Cross Site Scripting XSS, Privilege...

CVE-2010-3290

HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows prior to version 6.2 contains a vulnerability (CVE-2010-3290) that allows remote authenticated users to gain privileges via unknown vectors. The HP security bulletin confirms privilege escalation as the impact and notes that HP SIM v6...