[email protected]CVE-2011-1860

HistoryJun 14, 2011 - 5:55 p.m.

CVE-2011-1860

2011-06-1417:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2011-1860

hp service manager

service center

remote attackers

http session credentials

vulnerability

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.

CPENameOperatorVersion
hp:service_managerhp service managereq9.20
hp:service_managerhp service managereq7.02
hp:service_managerhp service managereq7.11
hp:service_managerhp service managereq9.21
hp:service_centerhp service centereq6.2.8

CPE	Name	Operator	Version
hp:service_manager	hp service manager	eq	9.20
hp:service_manager	hp service manager	eq	7.02
hp:service_manager	hp service manager	eq	7.11
hp:service_manager	hp service manager	eq	9.21
hp:service_center	hp service center	eq	6.2.8

References

marc.info/?l=bugtraq&m=130755929821099&w=2

secunia.com/advisories/44836

securityreason.com/securityalert/8273

www.securityfocus.com/bid/48168

www.securitytracker.com/id?1025611

exchange.xforce.ibmcloud.com/vulnerabilities/67911

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Related for CVE-2011-1860

cvelist1 prion1 securityvulns2