CVE-2010-1971

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968.

Score

CVSS 2.0 6.8 Medium

Status

Modified - hp-security-alert@hp.com

Published

2010-07-15

Last modified

2024-09-16

Weaknesses

CWE-352

Affected products

• Insight Software Installer (Hp)

References

• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388
• http://secunia.com/advisories/40553
• http://securitytracker.com/id?1024186
• http://www.vupen.com/english/advisories/2010/1792