CVE-2024-42504

MEDIUM

HPE IceWall Agent products - Cross-Site Request Forgery in Login Flow

Title source: llm
STIX 2.1

Description

A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow.

References (1)

Core 1

Scores

CVSS v3 4.3
EPSS 0.0015
EPSS Percentile 4.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-352
Status published
Products (3)
Hewlett Packard Enterprise/HPE IceWall Agent products IceWall Federation Agent - 4.0
Hewlett Packard Enterprise/HPE IceWall Agent products IceWall Gen11 Enterprise Edition - 11
Hewlett Packard Enterprise/HPE IceWall Agent products IceWall SSO Agent Option - 10
Published Oct 03, 2024
Tracked Since Feb 18, 2026