Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-42504 EUVD-2024-39652GHSA-269v-rmv9-mwh8

HPE IceWall Agent products, Cross-Site Request Forgery (CSRF)

Published Oct 3, 2024 · Updated Oct 3, 2024 · Assigned by hpe

Description

A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise HPE IceWall Agent products IceWall Federation Agent – < 4.0, IceWall Gen11 Enterprise Edition – < 11, IceWall SSO Agent Option – < 10 4.0

References