HP Systems Insight Manager CVE-2010-3288 Unspecified Cross Site Request Forgery Vulnerability

Bugtraq ID:	44263
Class:	Design Error
CVE:	CVE-2010-3288
Remote:	Yes
Local:	No
Published:	Oct 18 2010 12:00AM
Updated:	Oct 18 2010 12:00AM
Credit:	HP
Vulnerable:	HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0.0.96 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 Update 1 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.2 SP2 HP Systems Insight Manager 5.1 SP1 HP Systems Insight Manager 5.0 SP6 HP Systems Insight Manager 5.0 SP5 HP Systems Insight Manager 5.0 SP3 HP Systems Insight Manager 5.0 SP2 HP Systems Insight Manager 5.0 SP1 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 SP2 HP Systems Insight Manager 4.2 SP1 HP Systems Insight Manager 4.2
Not Vulnerable:	HP Systems Insight Manager 6.2

HP Systems Insight Manager CVE-2010-3288 Unspecified Cross Site Request Forgery Vulnerability

HP Systems Insight Manager is prone to a cross-site request-forgery vulnerability.

An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit a malicious site.

Versions prior to Systems Insight Manager 6.2 are vulnerable.