HP Operations Orchestration CVE-2013-6192 Unspecified Cross Site Request Forgery Vulnerability

Bugtraq ID:	64322
Class:	Design Error
CVE:	CVE-2013-6192
Remote:	Yes
Local:	No
Published:	Dec 11 2013 12:00AM
Updated:	Dec 23 2013 01:08AM
Credit:	HP
Vulnerable:
Not Vulnerable:

HP Operations Orchestration CVE-2013-6192 Unspecified Cross Site Request Forgery Vulnerability

HP Operations Orchestration is prone to an unspecified cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application; other attacks are also possible.

NOTE: Limited information is currently available regarding this issue. We will update this BID as more information emerges.

Versions prior to HP Operations Orchestration 9 are vulnerable.

HP Operations Orchestration CVE-2013-6192 Unspecified Cross Site Request Forgery Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim into visiting a malicious webpage.

HP Operations Orchestration CVE-2013-6192 Unspecified Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Operations Orchestration CVE-2013-6192 Unspecified Cross Site Request Forgery Vulnerability

References:

• HP Homepage (HP)