CVEvulnerability
CVE-2014-2633
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected configurations
• hp service manager 7.21
• hp service manager 9.21
• hp service manager 9.30
• hp service manager 9.31
• hp service manager 9.32
• hp service manager 9.33
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127 Vendor Advisory
- http://secunia.com/advisories/60028 secunia.com
- http://secunia.com/advisories/60714 secunia.com
- http://www.securityfocus.com/bid/69376 www.securityfocus.com
- http://www.securitytracker.com/id/1030756 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95449 exchange.xforce.ibmcloud.com
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127 Vendor Advisory
- http://secunia.com/advisories/60028 secunia.com
- http://secunia.com/advisories/60714 secunia.com
- http://www.securityfocus.com/bid/69376 www.securityfocus.com
- http://www.securitytracker.com/id/1030756 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95449 exchange.xforce.ibmcloud.com