Lucene search

[email protected]CVE-2012-2012

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-2012

2022-10-0316:15:37

[email protected]

web.nvd.nist.gov

smh

cve-2012-2012

nvd

form authentication

remote attack

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected configurations

NVD

Node

hpsystem_management_homepageRange≤7.1.0-16

hpsystem_management_homepageMatch2.0.0

hpsystem_management_homepageMatch2.0.1

hpsystem_management_homepageMatch2.0.1.104

hpsystem_management_homepageMatch2.0.2

hpsystem_management_homepageMatch2.0.2.106

hpsystem_management_homepageMatch2.1

hpsystem_management_homepageMatch2.1.0-103

hpsystem_management_homepageMatch2.1.0-103\(a\)

hpsystem_management_homepageMatch2.1.0-109

hpsystem_management_homepageMatch2.1.0-118

hpsystem_management_homepageMatch2.1.0.121

hpsystem_management_homepageMatch2.1.1

hpsystem_management_homepageMatch2.1.2

hpsystem_management_homepageMatch2.1.2-127

hpsystem_management_homepageMatch2.1.2.127

hpsystem_management_homepageMatch2.1.3

hpsystem_management_homepageMatch2.1.3.132

hpsystem_management_homepageMatch2.1.4

hpsystem_management_homepageMatch2.1.4-143

hpsystem_management_homepageMatch2.1.4.143

hpsystem_management_homepageMatch2.1.5

hpsystem_management_homepageMatch2.1.5-146

hpsystem_management_homepageMatch2.1.5.146

hpsystem_management_homepageMatch2.1.5.146b

hpsystem_management_homepageMatch2.1.6

hpsystem_management_homepageMatch2.1.6-156

hpsystem_management_homepageMatch2.1.6.156

hpsystem_management_homepageMatch2.1.7

hpsystem_management_homepageMatch2.1.7-168

hpsystem_management_homepageMatch2.1.7.168

hpsystem_management_homepageMatch2.1.8

hpsystem_management_homepageMatch2.1.8-177

hpsystem_management_homepageMatch2.1.8.179

hpsystem_management_homepageMatch2.1.9

hpsystem_management_homepageMatch2.1.9-178

hpsystem_management_homepageMatch2.1.10

hpsystem_management_homepageMatch2.1.10-186

hpsystem_management_homepageMatch2.1.10.186

hpsystem_management_homepageMatch2.1.10.186b

hpsystem_management_homepageMatch2.1.10.186c

hpsystem_management_homepageMatch2.1.11

hpsystem_management_homepageMatch2.1.11-197

hpsystem_management_homepageMatch2.1.11.197a

hpsystem_management_homepageMatch2.1.12-118

hpsystem_management_homepageMatch2.1.12-200

hpsystem_management_homepageMatch2.1.12.201

hpsystem_management_homepageMatch2.1.14

hpsystem_management_homepageMatch2.1.14.20

hpsystem_management_homepageMatch2.1.15

hpsystem_management_homepageMatch2.1.15-210

hpsystem_management_homepageMatch2.1.15.210

hpsystem_management_homepageMatch2.2.6

hpsystem_management_homepageMatch2.2.8

hpsystem_management_homepageMatch3.0.0

hpsystem_management_homepageMatch3.0.0-68

hpsystem_management_homepageMatch3.0.0.64

hpsystem_management_homepageMatch3.0.1

hpsystem_management_homepageMatch3.0.1-73

hpsystem_management_homepageMatch3.0.1.73

hpsystem_management_homepageMatch3.0.2

hpsystem_management_homepageMatch3.0.2-77

hpsystem_management_homepageMatch3.0.2.77

hpsystem_management_homepageMatch3.0.2.77b

hpsystem_management_homepageMatch6.0

hpsystem_management_homepageMatch6.0.0-95

hpsystem_management_homepageMatch6.0.0.96

hpsystem_management_homepageMatch6.1

hpsystem_management_homepageMatch6.1.0-103

hpsystem_management_homepageMatch6.1.0.102

hpsystem_management_homepageMatch6.2.0

hpsystem_management_homepageMatch6.2.2.7

hpsystem_management_homepageMatch6.3.0

hpsystem_management_homepageMatch6.3.1

hpsystem_management_homepageMatch7.0

AND

linuxlinux_kernel

microsoftwindows

CPENameOperatorVersion
hp:system_management_homepagehp system management homepagele7.1.0-16
hp:system_management_homepagehp system management homepageeq2.0.0
hp:system_management_homepagehp system management homepageeq2.0.1
hp:system_management_homepagehp system management homepageeq2.0.1.104
hp:system_management_homepagehp system management homepageeq2.0.2
hp:system_management_homepagehp system management homepageeq2.0.2.106
hp:system_management_homepagehp system management homepageeq2.1
hp:system_management_homepagehp system management homepageeq2.1.0-103
hp:system_management_homepagehp system management homepageeq2.1.0-103\(a\)
hp:system_management_homepagehp system management homepageeq2.1.0-109

CPE	Name	Operator	Version
hp:system_management_homepage	hp system management homepage	le	7.1.0-16
hp:system_management_homepage	hp system management homepage	eq	2.0.0
hp:system_management_homepage	hp system management homepage	eq	2.0.1
hp:system_management_homepage	hp system management homepage	eq	2.0.1.104
hp:system_management_homepage	hp system management homepage	eq	2.0.2
hp:system_management_homepage	hp system management homepage	eq	2.0.2.106
hp:system_management_homepage	hp system management homepage	eq	2.1
hp:system_management_homepage	hp system management homepage	eq	2.1.0-103
hp:system_management_homepage	hp system management homepage	eq	2.1.0-103\(a\)
hp:system_management_homepage	hp system management homepage	eq	2.1.0-109