First published: Tue Jun 14 2011(Updated: )
Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.
Credit: hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
HP Service Manager | =9.20 | |
HP Service Manager | =7.02 | |
HP Service Manager | =7.11 | |
HP Service Manager | =9.21 | |
Hp Service Center | =6.2.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-1860 is considered a critical vulnerability due to its potential to allow remote attackers to capture HTTP session credentials.
To mitigate CVE-2011-1860, it is recommended to upgrade to a patched version of HP Service Manager or HP Service Center that addresses this vulnerability.
CVE-2011-1860 affects HP Service Manager versions 7.02, 7.11, 9.20, and 9.21, as well as HP Service Center version 6.2.8.
CVE-2011-1860 is exploited through unspecified vectors that enable remote attackers to capture session credentials.
Exploitation of CVE-2011-1860 could lead to unauthorized access to sensitive user sessions, posing significant security risks.