Unscored CVE-2011-0277 EUVD-2011-0303GHSA-7qh4-q2fr-g376

Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authenti…

Published Feb 9, 2011 · Updated Aug 6, 2024 · Assigned by hp

Description

Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.

References

1025032 vdb-entry
70836 vdb-entry
46258 vdb-entry
SSRT100381 vendor-advisory
43058 third-party-advisory