First published: Tue Dec 17 2013(Updated: )
Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Credit: hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
HP Operations Orchestration | <=7.5 | |
HP Operations Orchestration | =7.1 | |
HP Operations Orchestration | =7.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-6192 is considered a moderate severity vulnerability due to its potential for CSRF attacks.
To fix CVE-2013-6192, upgrade to HP Operations Orchestration version 7.6 or later.
CVE-2013-6192 allows remote attackers to hijack the authentication of users, potentially leading to unauthorized actions.
CVE-2013-6192 affects HP Operations Orchestration versions up to 7.5 and specifically versions 7.1 and 7.2.
Yes, CVE-2013-6192 can be exploited remotely by attackers performing CSRF attacks.