CVE-2012-2003

EPSS 1.89%
Veröffentlicht 02.05.2012 22:55:02
Zuletzt bearbeitet 16.06.2026 23:40:46
Erkennungen
Login

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

NVD 33 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hp ≫ Insight Management Agents Update b Version <= 8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 6.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 6.31.0.0 Update b

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 6.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.40.1.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.41.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.51.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.80.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.90.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.91.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.95.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.1.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.5

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.11.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.15.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.22.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.26.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.89%	0.769

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://osvdb.org/81666

http://secunia.com/advisories/49054

http://www.securityfocus.com/archive/1/522548

http://www.securityfocus.com/bid/53341

http://www.securitytracker.com/id?1027003

https://exchange.xforce.ibmcloud.com/vulnerabilities/75312

https://nvd.nist.gov/vuln/detail/CVE-2012-2003

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2003

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2003

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-2003