[security bulletin] HPSBMA02583 SSRT100070 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote URL Redirection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02518794 Version: 1 HPSBMA02583 SSRT100070 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote URL Redirection NOTICE: The information in this Security Bulletin should be acte...

CVE-2010-1586

HP System Management Homepage (SMH) 2.x.x.x contains an open redirect in red2301.html that can be exploited via the RedirectUrl parameter to send users to arbitrary sites, enabling phishing. The vulnerability is documented as CVE-2010-1586 with a CVSS 2.0 base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P...