HP Insight Control Multiple Unspecified Security Vulnerabilities

Bugtraq ID:	47524
Class:	Input Validation Error
CVE:	CVE-2011-1544 CVE-2011-1545
Remote:	Yes
Local:	No
Published:	Apr 21 2011 12:00AM
Updated:	Apr 21 2011 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	HP Insight Control 6.2 HP Insight Control 6.1 HP Insight Control 6.0
Not Vulnerable:	HP Insight Control 6.3

HP Insight Control Multiple Unspecified Security Vulnerabilities

HP Insight Control is prone to an unspecified remote code-execution vulnerability and an unspecified cross-site request-forgery vulnerability.

An attacker may exploit these issues to execute arbitrary code with elevated privileges or perform unauthorized actions by enticing a logged-in user to visit a malicious site. Other attacks are also possible.

HP Insight Control versions prior to 6.3 are vulnerable.

HP Insight Control Multiple Unspecified Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Insight Control Multiple Unspecified Security Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

HP Insight Control Multiple Unspecified Security Vulnerabilities

References:

• HP Homepage (HP)
  
• HP Insight Control Management Software Homepage (HP)
  
• HPSBMA02664 SSRT100417 rev.1 - HP Insight Control Performance Management for Win (HP)