Design/Logic Flaw

2012-06-2922:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

CPENameOperatorVersion
system_management_homepageeq<= 7.1.0-16
system_management_homepageeq2.0.0
system_management_homepageeq2.0.1
system_management_homepageeq2.0.1.104
system_management_homepageeq2.0.2
system_management_homepageeq2.0.2.106
system_management_homepageeq2.1
system_management_homepageeq2.1.0-103
system_management_homepageeq2.1.0-103a
system_management_homepageeq2.1.0-109

Name	Operator	Version
system_management_homepage	eq	<= 7.1.0-16
system_management_homepage	eq	2.0.0
system_management_homepage	eq	2.0.1
system_management_homepage	eq	2.0.1.104
system_management_homepage	eq	2.0.2
system_management_homepage	eq	2.0.2.106
system_management_homepage	eq	2.1
system_management_homepage	eq	2.1.0-103
system_management_homepage	eq	2.1.0-103a
system_management_homepage	eq	2.1.0-109