Информационная безопасность
[RU] switch to English


Многочисленные уязвимости безопасности в HP Insight Management Agents
Опубликовано:10 мая 2012 г.
Источник:
SecurityVulns ID:12373
Тип:удаленная
Уровень опасности:
5/10
Описание:Межсайтовый скриптинг, подмена запров, перенаправление URL, несанционированный доступ, DoS.
CVE:CVE-2012-2006 (Unspecified vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to modify data or cause a denial of service via unknown vectors.)
 CVE-2012-2005 (Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.)
 CVE-2012-2004 (Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.)
 CVE-2012-2003 (Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.)
Оригинальный текстdocumentHP, [security bulletin] HPSBMU02770 SSRT100848 rev.1 - HP Insight Management Agents for Windows Server, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), URL Redirection, Unauthorized Modification, Denial of Service (10.05.2012)

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород