CVE-2012-3257

HP Business Availability Center BAC 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors...

CVE-2012-3257

HP BAC 8.07 (Windows and Solaris) is affected by CVE-2012-3257. The HP security bulletin documents cross-site scripting (XSS), cross-site request forgery (CSRF), and web session hijacking as potential issues that could be remotely exploited by authenticated users. Patches are provided for BAC v8....

[security bulletin] HPSBMU02811 SSRT100937 rev.1 - HP Business Availability Center (BAC) Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), and Web Session Hijacking

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03475750 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03475750 Version: 1 HPSBMU02811...