ACROS Security Problem Report #2007-05-14-1 – There is a session fixation vulnerability in HP Systems Insight Manager 4.2 and 5.0 SP4/5 (IM) that allows an attacker to gain administrative access to IM console. As a result, the attacker can take complete administrative control over all managed systems, upload and execute malicious code on them, extract any information from them and disable them at her will.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56857/ASPR-2007-05-14-1.txt
Source: https://packetstormsecurity.com/files/56857/ASPR-2007-05-14-1.txt.html