Cross-Site Request Forgery in HP Business Availability Center Software
CVE-2012-3256

Currently unrated

Key Information:

Vendor
HP
Status
Business Availability Center
Vendor
CVE Published:
8 September 2012

Summary

A cross-site request forgery (CSRF) vulnerability exists in HP Business Availability Center 8.07, enabling remote attackers to bypass user authentication. This flaw leverages unverified requests, allowing unauthorized access to sensitive user operations and data. Attackers can exploit this vulnerability through various unknown vectors, potentially compromising the integrity and security of user sessions.

References

http://osvdb.org/85251
vdb-entryx_refsource_OSVDB
http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP
http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.