HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities

This host is running HP SiteScope and is prone to cross-site scripting and session fixation vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpsitescopexssnsessionfixationvuln.nasl 5390 2017-02-21 18:39:27Z mime $ HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities Authors:...

[security bulletin] HPSBMU02692 SSRT100581 rev.2 - HP SiteScope, Remote Cross Site Scripting (XSS) and Session Fixation Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02940969 Version: 2 HPSBMU02692 SSRT100581 rev.2 - HP SiteScope, Remote Cross Site Scripting XSS and Session Fixation Attack NOTICE: The information in this Security Bulletin should be acted upon...

CVE-2011-2401

HP SiteScope versions 9.x–11.x are affected by CVE-2011-2401 (session fixation). The vulnerability could allow remote attackers, with network access and no authentication, to hijack user sessions (CVSSv2 base score 9.0 per HP bulletin), via unspecified vectors. HP’s security bulletin HPSBMU02692 ...