Cross-Site Request Forgery Vulnerability in HP Insight Control Virtual Machine Management

CVE-2010-3989

Summary

A vulnerability exists in HP Insight Control Virtual Machine Management prior to version 6.2 that exposes users to potential remote attacks. Attackers can exploit this Cross-Site Request Forgery (CSRF) vulnerability to hijack the authentication of unspecified victims. This exploitation may allow unauthorized actions performed on behalf of authenticated users, resulting in data exposure or compromise of the affected system. Organizations using this software should review their systems and implement appropriate mitigation strategies to address this security risk.

References