PT-2010-3256 · Hewlett Packard · Hp System Management Homepage

Aung Khant · Published 2010-04-28 · Updated 2017-08-17 · CVE-2010-1586

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP System Management Homepage (SMH) versions 2.x.x.x

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter in the red2301.html file. This can lead to phishing attacks.

Recommendations For HP System Management Homepage (SMH) versions 2.x.x.x, consider restricting access to the RedirectUrl parameter in the red2301.html file to minimize the risk of exploitation. Avoid using the RedirectUrl parameter in the affected file until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-1586

Affected Products

Hp System Management Homepage

References · 6

• 🔥 http://securityfocus.com/bid/39676 · Exploit
• 🔥 https://exploit-db.com/exploits/33873 · Exploit
• 🔥 http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1586 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58107 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1586 · Note