Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-3846
cve-2011-3846
cross-site request forgery
csrf
hp system management homepage
smh
authentication hijacking
administrative accounts
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
32.1%
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
Affected configurations
Node
hpsystem_management_homepageMatch6.2.2.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:system_management_homepage | hp system management homepage | eq | 6.2.2.7 |
References
Related
cvelist
cvelist
CVE-2011-3846
2022-10-03 16:15:06
prion
prion
Cross site request forgery (csrf)
2012-04-12 10:45:00
nvd
nvd
CVE-2011-3846
2012-04-12 10:45:13
openvas
openvas
nessus
nessus
HP System Management Homepage < 7.0 Multiple Vulnerabilities
2012-04-20 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
32.1%
Related for CVE-2011-3846