[security bulletin] HPSBMA02601 SSRT100316 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS), Privilege Escalation, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02563279 Version: 1 HPSBMA02601 SSRT100316 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting XSS, Privilege Escalation, Unauthorized Access NOTICE: The...

CVE-2010-3992

HP Insight Control Server Migration for Windows, before v6.2, contains a vulnerability (CVE-2010-3992) that could allow remote authenticated users to gain privileges. The HP security bulletin for SSRT100316 rev.1 rates CVE-2010-3992 with a base CVSS v2.0 vector of AV:N/AC:L/Au:S/C:P/I:C/A:P and a...