CVE-2010-3288: CSRF
Published Oct 22, 2010
·Updated
Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
9 affected components
HP Systems Insight Manager=4.1
HP Systems Insight Manager=4.2
HP Systems Insight Manager=4.2-sp1
HP Systems Insight Manager=6.0
HP Systems Insight Manager=4.1-sp1
HP Systems Insight Manager<=6.1
HP Systems Insight Manager=4.2-sp2
HP Systems Insight Manager=5.0
HP Systems Insight Manager=4.0
Event History
Oct 22, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3288?
CVE-2010-3288 has a medium severity rating due to its ability to allow unauthorized access through cross-site request forgery.
2
How do I fix CVE-2010-3288?
To fix CVE-2010-3288, upgrade HP Systems Insight Manager to version 6.2 or later.
3
What systems are affected by CVE-2010-3288?
CVE-2010-3288 affects HP Systems Insight Manager versions up to 6.1, including versions 4.x, 5.0, and 6.0.
4
What type of vulnerability is CVE-2010-3288?
CVE-2010-3288 is a cross-site request forgery (CSRF) vulnerability.
5
Can CVE-2010-3288 lead to account hijacking?
Yes, CVE-2010-3288 can potentially lead to account hijacking by allowing remote attackers to exploit user sessions.