CSRF Vulnerability in HPE Matrix Operating Environment
CVE-2017-5781

8.8HIGH

Key Information:

Vendor
HP
Status
Matrix Operating Environment
Vendor
CVE Published:
15 February 2018

Summary

A CSRF vulnerability has been identified in HPE Matrix Operating Environment version 7.6, potentially allowing unauthorized actions to be executed on behalf of an authenticated user. This issue arises from insufficient validation of requests, which can be exploited to perform actions without the user's consent, compromising the integrity and security of the application. Organizations using this product should take immediate steps to mitigate the risk.

Affected Version(s)

Matrix Operating Environment v7.6

References

https://support.hpe.com/hpsc/doc/public/display?docId=emr...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.