PT-2011-2251 · Hewlett Packard · Hp Power Manager

Published 2011-02-09 · Updated 2013-08-03 · CVE-2011-0277

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Power Manager versions 4.3.2 and earlier

Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.

Recommendations For HP Power Manager versions 4.3.2 and earlier, update to a version later than 4.3.2 to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2011-0277

Affected Products

Hp Power Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2011-0277 · Security Note
• http://secunia.com/advisories/43058 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02711131 · Vendor Advisory
• http://securitytracker.com/id?1025032 · Note
• http://securityfocus.com/bid/46258 · Note
• http://osvdb.org/70836 · Note