Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-3846
cve-2011-3846
cross-site request forgery
csrf
hp system management homepage
smh
authentication hijacking
administrative accounts
7.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
31.9%
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
Affected configurations
Node
hpsystem_management_homepageMatch6.2.2.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:system_management_homepage | hp system management homepage | eq | 6.2.2.7 |
References
Related
cvelist
cvelist
CVE-2011-3846
2022-10-03 16:15:06
prion
prion
Cross site request forgery (csrf)
2012-04-12 10:45:00
nvd
nvd
CVE-2011-3846
2012-04-12 10:45:13
nessus
nessus
HP System Management Homepage < 7.0 Multiple Vulnerabilities
2012-04-20 00:00:00
openvas
openvas
7.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
31.9%
Related for CVE-2011-3846