CVE-2010-1586

2010-04-2822:30:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2010-1586

open redirect vulnerability

hp system management homepage

smh 2.x.x.x

remote attackers

phishing attacks

6.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.8%

JSON

Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter.

CPENameOperatorVersion
hp:system_management_homepagehp system management homepageeq2.1.9-178
hp:system_management_homepagehp system management homepageeq2.1.2-127
hp:system_management_homepagehp system management homepageeq2.1.11-197
hp:system_management_homepagehp system management homepageeq2.1.2
hp:system_management_homepagehp system management homepageeq2.1.6
hp:system_management_homepagehp system management homepageeq2.0.2
hp:system_management_homepagehp system management homepageeq2.1.8-177
hp:system_management_homepagehp system management homepageeq2.2.6
hp:system_management_homepagehp system management homepageeq2.1.0-103
hp:system_management_homepagehp system management homepageeq2.1.12-118

CPE	Name	Operator	Version
hp:system_management_homepage	hp system management homepage	eq	2.1.9-178
hp:system_management_homepage	hp system management homepage	eq	2.1.2-127
hp:system_management_homepage	hp system management homepage	eq	2.1.11-197
hp:system_management_homepage	hp system management homepage	eq	2.1.2
hp:system_management_homepage	hp system management homepage	eq	2.1.6
hp:system_management_homepage	hp system management homepage	eq	2.0.2
hp:system_management_homepage	hp system management homepage	eq	2.1.8-177
hp:system_management_homepage	hp system management homepage	eq	2.2.6
hp:system_management_homepage	hp system management homepage	eq	2.1.0-103
hp:system_management_homepage	hp system management homepage	eq	2.1.12-118