HPE IceWall Agent Security Vulnerability
CVE-2024-42504

4.3MEDIUM

Key Information:

What is CVE-2024-42504?

A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow.

HPE IceWall Agent products Windows IceWall Federation Agent

HPE IceWall Agent products Windows IceWall Federation Agent < 4.0

HPE IceWall Agent products Windows IceWall Gen11 Enterprise Edition < 11

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

CVE-2024-42504 Data