HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-3235
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03475750