CVE-2012-2003

EPSS 0.26%
Veröffentlicht 02.05.2012 22:55:02
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle hp-security-alert@hp.com
Teams Watchlist Login
Unerledigt Login

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hp ≫ Insight Management Agents Updateb Version <= 8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.31.0.0 Updateb

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.40.1.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.41.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.51.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.80.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.90.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.91.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.95.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.1.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.5

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.11.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.15.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.22.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.26.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.26%	0.492

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

http://osvdb.org/81666

http://secunia.com/advisories/49054

http://www.securityfocus.com/archive/1/522548

http://www.securityfocus.com/bid/53341

http://www.securitytracker.com/id?1027003

https://exchange.xforce.ibmcloud.com/vulnerabilities/75312

https://nvd.nist.gov/vuln/detail/CVE-2012-2003

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2003

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2003

EUVD