Cross-Site Request Forgery Vulnerability in HP Version Control Repository Manager
CVE-2015-5412

Currently unrated

Key Information:

Vendor
HP
Status
Version Control Repository Manager
Vendor
CVE Published:
26 August 2015

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in HP Version Control Repository Manager (VCRM) prior to version 7.5.0, allowing remote authenticated users to potentially hijack the authentication of other users. The exploitation of this vulnerability may occur through various vectors, permitting an attacker to manipulate user actions without consent.

References

http://www.securitytracker.com/id/1033378
vdb-entryx_refsource_SECTRACK
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/do...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.