CVE-2011-0277 Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new adminis...
MediumCVSS 6.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc power manager | <= 4.3.2 | No fix listed |
| HP Inc power manager | = 4.2.5 | No fix listed |
| HP Inc power manager | = 4.2.6 | No fix listed |
| HP Inc power manager | = 4.2.7 | No fix listed |
| HP Inc power manager | = 4.2.8 | No fix listed |
| HP Inc power manager | = 4.2.9 | No fix listed |
References
- SSRT100381 vendor-advisory
- 70836 vdb-entry
- 43058 third-party-advisory vendor-advisory
- 46258 vdb-entry
- 1025032 vdb-entry