CVE-2024-42504

HPE IceWall Agent products, Cross-Site Request Forgery (CSRF)

State: Published
Severity: 4.3 Medium
Published: Oct 3, 2024
Updated: Oct 3, 2024
Reserved: Aug 2, 2024

Description

A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	hpe

Weaknesses

CWE-352 Cross-Site Request Forgery (CSRF)

Affected Products

Product	Versions
HPE IceWall Agent productsHewlett Packard Enterprise	IceWall Federation Agent to before 4.0Affected IceWall Gen11 Enterprise Edition to before 11Affected IceWall SSO Agent Option to before 10Affected

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04711en_us&docLocale=en_US

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.