Cross site request forgery (csrf)

2013-03-2823:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.4%

JSON

Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CPENameOperatorVersion
procurve_switch_softwareeq<= va.2.8
procurve_switch_softwareeqh 10.74
procurve_switch_softwareeqh 10.80
procurve_switch_softwareeq.7.2-h
procurve_switch_softwareeq.7.3-h
procurve_switch_softwareeq.7.31-h
procurve_switch_softwareeq.7.32-h
procurve_switch_softwareeq.7.41-h
procurve_switch_softwareeq.7.45-h
procurve_switch_softwareeq.7.46-h

Name	Operator	Version
procurve_switch_software	eq	<= va.2.8
procurve_switch_software	eq	h 10.74
procurve_switch_software	eq	h 10.80
procurve_switch_software	eq	.7.2-h
procurve_switch_software	eq	.7.3-h
procurve_switch_software	eq	.7.31-h
procurve_switch_software	eq	.7.32-h
procurve_switch_software	eq	.7.41-h
procurve_switch_software	eq	.7.45-h
procurve_switch_software	eq	.7.46-h