CVE-2010-3011

2010-09-1718:00:00

CWE-20

[email protected]

web.nvd.nist.gov

crlf injection

smh

vulnerability

http headers

http response splitting

remote attackers

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.4%

JSON

CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

CPENameOperatorVersion
hp:system_management_homepagehp system management homepageeq2.1.9-178
hp:system_management_homepagehp system management homepageeq2.1.11.197
hp:system_management_homepagehp system management homepageeq2.1.2-127
hp:system_management_homepagehp system management homepageeq6.1.0.102
hp:system_management_homepagehp system management homepageeq2.1.10.186
hp:system_management_homepagehp system management homepageeq2.1.5.146
hp:system_management_homepagehp system management homepageeq2.1.11-197
hp:system_management_homepagehp system management homepageeq2.1.14.20
hp:system_management_homepagehp system management homepageeq2.1.2
hp:system_management_homepagehp system management homepageeq2.1.6

CPE	Name	Operator	Version
hp:system_management_homepage	hp system management homepage	eq	2.1.9-178
hp:system_management_homepage	hp system management homepage	eq	2.1.11.197
hp:system_management_homepage	hp system management homepage	eq	2.1.2-127
hp:system_management_homepage	hp system management homepage	eq	6.1.0.102
hp:system_management_homepage	hp system management homepage	eq	2.1.10.186
hp:system_management_homepage	hp system management homepage	eq	2.1.5.146
hp:system_management_homepage	hp system management homepage	eq	2.1.11-197
hp:system_management_homepage	hp system management homepage	eq	2.1.14.20
hp:system_management_homepage	hp system management homepage	eq	2.1.2
hp:system_management_homepage	hp system management homepage	eq	2.1.6