CVE-2012-2003

Опубликовано: 02 мая 2012

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:hp:insight_management_agents:*:b:*:*:*:*:*:*

Версия до 8.70.0.0 (включая)

cpe:2.3:a:hp:insight_management_agents:6.30.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:6.31.0.0:b:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:6.40.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.10.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.20.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.30.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.40.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.40.1.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.41.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.50.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.51.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.60.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.70.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.80.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.90.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.91.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:7.95.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.5:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.10.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.11.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.15.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.20.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.22.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.26.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.30.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.40.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.50.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.60.0.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:insight_management_agents:8.70.0.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:*:x64:*:*:*:*:*

EPSS

Процентиль: 49%

0.00257

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-vjm7-9wwp-wj9r

github

больше 3 лет назад