[security bulletin] HPSBMU02947 rev.1 - HP System Management Homepage (SMH) Running on Linux and Windows, Remote Disclosure of Information and Cross-Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04039138 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04039138 Version: 1 HPSBMU02947 rev....

CVE-2013-6188

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6188

HP System Management Homepage (SMH) versions 7.1–7.2.2 are affected by a cross-site request forgery (CSRF) vulnerability that could allow remote attackers to hijack an authenticated session via unknown vectors. HP’s security bulletin notes this alongside a related CVE (CVE-2013-4846 for info disc...

KLA10194 SB vulnerability in HP SMH

CSRF vulnerability was found in the HP SMH. By exploiting this vulnerability malicious users can hijack auth. This vulnerability can be exploited from remote by unknown vectors. Original advisories - Related products HP-System-Management-Homepage CVE list CVE-2013-6188 high Solution Update to...

HP System Management Homepage < 7.3 Multiple Vulnerabilities

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server may be affected by the following vulnerabilities : - Versions prior to 7.3 are affected by an unspecified information disclosure vulnerability. CVE-2013-4846 - Versions 7.1 throu...