HP Insight Control Server Migration Unspecified Cross Site Request Forgery Vulnerability

Bugtraq ID:	41581
Class:	Design Error
CVE:	CVE-2010-1971
Remote:	Yes
Local:	No
Published:	Jul 12 2010 12:00AM
Updated:	Jul 12 2010 12:00AM
Credit:	Reported by the vendor
Vulnerable:	HP Insight Control 6.0 HP Insight Control 0
Not Vulnerable:	HP Insight Control 6.1

HP Insight Control Server Migration Unspecified Cross Site Request Forgery Vulnerability

HP Insight Control Server Migration is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application; other attacks are also possible.

Versions prior to HP Insight Control Server Migration 6.1 are vulnerable.

HP Insight Control Server Migration Unspecified Cross Site Request Forgery Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into visiting a malicious webpage.

HP Insight Control Server Migration Unspecified Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references for more information.

HP Insight Control Server Migration Unspecified Cross Site Request Forgery Vulnerability

References:

• HP Insight Control (HP)