PT-2024-29994 · Hewlett Packard · Hpe Icewall Agent

Published 2024-10-02 · Updated 2024-10-04 · CVE-2024-42504

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions HPE IceWall Agent products (affected versions not specified)

Description A security issue in HPE IceWall Agent products can be exploited remotely, leading to a Cross-Site Request Forgery (CSRF) in the login flow. This allows for unauthorized actions on behalf of the user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-42504

Affected Products

Hpe Icewall Agent

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-42504 · Security Note
• https://twitter.com/CVEnew/status/1841731441492951505 · Twitter Post
• https://t.me/cvedetector/6891 · Telegram Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04711en_us&docLocale=en_US · Note
• https://twitter.com/VulmonFeeds/status/1841788670828744884 · Twitter Post