PT-2010-3256 · Hewlett Packard · Hp System Management Homepage

Aung Khant · Publicado 2010-04-28 · Atualizado 2017-08-17 · CVE-2010-1586

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP System Management Homepage (SMH) versions 2.x.x.x

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter in the red2301.html file. This can lead to phishing attacks.

Recommendations For HP System Management Homepage (SMH) versions 2.x.x.x, consider restricting access to the RedirectUrl parameter in the red2301.html file to minimize the risk of exploitation. Avoid using the RedirectUrl parameter in the affected file until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-1586

Produtos afetados

Hp System Management Homepage

Referências · 6

• 🔥 http://securityfocus.com/bid/39676 · Exploit
• 🔥 https://exploit-db.com/exploits/33873 · Exploit
• 🔥 http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58107 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1586 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1586 · Nota de Segurança