Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-42504

HPE IceWall Agent products, Cross-Site Request Forgery (CSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise HPE IceWall Agent products

Default version status: affected

  • IceWall Federation Agent to < 4.0affected
  • IceWall Gen11 Enterprise Edition to < 11affected
  • IceWall SSO Agent Option to < 10affected

References