HP Insight Control for Linux Cross Site Request Forgery Vulnerability
BID:44537
Info
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 44537 |
| Class: | Design Error |
| CVE: |
CVE-2010-4106 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 29 2010 12:00AM |
| Updated: | Oct 29 2010 12:00AM |
| Credit: | This issue was reported by the vendor. |
| Vulnerable: |
HP Insight Control 6.1 HP Insight Control 6.0 |
| Not Vulnerable: |
HP Insight Control 6.2 |
Discussion
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
HP Insight Control for Linux is prone to a cross-site request-forgery vulnerability.
An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit a malicious site.
Versions prior to Insight Control for Linux 6.2 are vulnerable.
HP Insight Control for Linux is prone to a cross-site request-forgery vulnerability.
An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit a malicious site.
Versions prior to Insight Control for Linux 6.2 are vulnerable.
Exploit / POC
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
To exploit the issue, an attacker must entice a user into visiting a malicious site.
To exploit the issue, an attacker must entice a user into visiting a malicious site.
Solution / Fix
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
Solution:
The vendor has released updates. Please see the references for more information.
Solution:
The vendor has released updates. Please see the references for more information.
References
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
References:
References: