CVEvulnerability
CVE-2011-0277
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.
Affected configurations
• hp power manager (<= 4.3.2)
• hp power manager 4.2.5
• hp power manager 4.2.6
• hp power manager 4.2.7
• hp power manager 4.2.8
• hp power manager 4.2.9
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02711131 h20000.www2.hp.com
- http://osvdb.org/70836 osvdb.org
- http://secunia.com/advisories/43058 Vendor Advisory
- http://www.securityfocus.com/bid/46258 www.securityfocus.com
- http://www.securitytracker.com/id?1025032 www.securitytracker.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02711131 h20000.www2.hp.com
- http://osvdb.org/70836 osvdb.org
- http://secunia.com/advisories/43058 Vendor Advisory
- http://www.securityfocus.com/bid/46258 www.securityfocus.com
- http://www.securitytracker.com/id?1025032 www.securitytracker.com