[security bulletin] HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross Site Scripting (XSS), Arbitrary File Download

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02571464 Version: 1 HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross Site Scripting XSS, Arbitrary File Download NOTICE: The information in this Security Bulletin shou...

CVE-2010-4102

CVE-2010-4102 affects HP Insight Recovery prior to 6.2. It allows remote attackers to read arbitrary files via unknown vectors. HP has addressed the issue in Insight Recovery v6.2 or later; apply the update to mitigate. The CVSS impact in the source entry is Base Score 5.0 (Medium). Details on ex...