CVE-2010-4102

CVE-2010-4102 affects HP Insight Recovery prior to 6.2. It allows remote attackers to read arbitrary files via unknown vectors. HP has addressed the issue in Insight Recovery v6.2 or later; apply the update to mitigate. The CVSS impact in the source entry is Base Score 5.0 (Medium). Details on ex...

CVE-2010-4031

Vulnerability CVE-2010-4031 affects HP Insight Control Performance Management for Windows (before 6.2). The issue allows remote authenticated users to gain privileges via unknown vectors due to an unspecified vulnerability in the affected software’s privilege handling. HP’s security bulletin conf...

CVE-2010-4032

CVE-2010-4032 is a CSRF vulnerability in HP Insight Control Performance Management for Windows, pre-6.2, that could allow remote attackers to hijack user authentication via unknown vectors. The security bulletin indicates HP released v6.2 or later to resolve the issue; apply the update or equival...

CVE-2010-4105

Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors...

CVE-2010-4100

HP Insight Control Performance Management for Windows (before 6.1 update 2) is affected by CVE-2010-4100. The vulnerability enables remote attackers to download/read arbitrary files via unknown vectors. HP’s security bulletin HP HPSBMA02600 (SSRT100239 rev.1) confirms the affected software and st...

CVE-2010-4104

CVE-2010-4104 affects HP Insight Orchestration before version 6.2. The vulnerability allows remote attackers to read arbitrary files via unknown vectors. The CVSSv2 base score is 5.0 (Network, Low interaction, Partial confidentiality impact). HP’s security bulletin HPSBMA02606/SECURITYVULNS:DOC:2...

CVE-2010-4102

Unspecified vulnerability in HP Insight Recovery before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-4105

HP Insight Orchestration for Windows is affected by CVE-2010-4105: prior to v6.2, remote attackers can bypass access controls and potentially read/modify data or gain unauthorized access. The HP security bulletin HPSBMA02606/SSRT100321 rev.1 states vulnerable versions are HP Insight Orchestration...

CVE-2010-4030

HP Insight Control Performance Management for Windows is affected by CVE-2010-4030 (XSS). The vulnerability exists in versions prior to 6.2 and could allow remote injection of arbitrary script/HTML via unspecified vectors. HP’s security bulletin (HPSBMA02602 rev.1) confirms the issue and states t...

CVE-2010-4106: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2010-5300

Name of the Vulnerable Software and Affected Versions HP Insight Orchestration versions prior to 6.2 Description The issue allows remote attackers to bypass intended access restrictions, obtain sensitive information, or modify data via unknown vectors. Recommendations For versions prior to 6.2,...

CVE-2010-4103: Undefined Security Weakness

Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-4101: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Recovery before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2010-5247

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.2 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For versions prior to 6.2, update to version 6.2 or later to resolv...

PT-2010-5298

Name of the Vulnerable Software and Affected Versions HP Insight Managed System Setup Wizard versions prior to 6.2 Description The issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.2, update to version 6.2 or later to resolve the issue...

PT-2010-5248

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 6.2,...

CVE-2010-4104: Undefined Security Weakness

Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

PT-2010-5295

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.1 update 2 Description The issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.1 update 2, update to version 6.1 update 2 or later to...

CVE-2010-4032: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4105: Undefined Security Weakness

Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors...