CVE-2011-0277

Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hp:power_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.7:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.5:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.8:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.6:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.9:*:*:*:*:*:*:*

Information

Published : 2011-02-08 17:00

Updated : 2013-08-03 00:29


NVD link : CVE-2011-0277

Mitre link : CVE-2011-0277


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

hp

  • power_manager