Lucene search

K
cve[email protected]CVE-2012-2004
HistoryMay 02, 2012 - 10:55 p.m.

CVE-2012-2004

2012-05-0222:55:02
CWE-20
web.nvd.nist.gov
26
cve-2012-2004
open redirect
hp insight management agents
windows server
remote attackers
phishing attacks

8.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:C/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected configurations

NVD
Node
hpinsight_management_agentsRange8.70.0.0b
OR
hpinsight_management_agentsMatch6.30.0.0
OR
hpinsight_management_agentsMatch6.31.0.0b
OR
hpinsight_management_agentsMatch6.40.0.0
OR
hpinsight_management_agentsMatch7.0.0.0
OR
hpinsight_management_agentsMatch7.10.0.0
OR
hpinsight_management_agentsMatch7.20.0.0
OR
hpinsight_management_agentsMatch7.30.0.0
OR
hpinsight_management_agentsMatch7.40.0.0
OR
hpinsight_management_agentsMatch7.40.1.0
OR
hpinsight_management_agentsMatch7.41.0.0
OR
hpinsight_management_agentsMatch7.50.0.0
OR
hpinsight_management_agentsMatch7.51.0.0
OR
hpinsight_management_agentsMatch7.60.0.0
OR
hpinsight_management_agentsMatch7.70.0.0
OR
hpinsight_management_agentsMatch7.80.0.0
OR
hpinsight_management_agentsMatch7.90.0.0
OR
hpinsight_management_agentsMatch7.91.0.0
OR
hpinsight_management_agentsMatch7.95.0.0
OR
hpinsight_management_agentsMatch8.0.0.0
OR
hpinsight_management_agentsMatch8.1.0.0
OR
hpinsight_management_agentsMatch8.5
OR
hpinsight_management_agentsMatch8.10.0.0
OR
hpinsight_management_agentsMatch8.11.0.0
OR
hpinsight_management_agentsMatch8.15.0.0
OR
hpinsight_management_agentsMatch8.20.0.0
OR
hpinsight_management_agentsMatch8.22.0.0
OR
hpinsight_management_agentsMatch8.26.0.0
OR
hpinsight_management_agentsMatch8.30.0.0
OR
hpinsight_management_agentsMatch8.40.0.0
OR
hpinsight_management_agentsMatch8.50.0.0
OR
hpinsight_management_agentsMatch8.60.0.0
OR
hpinsight_management_agentsMatch8.70.0.0
AND
microsoftwindows_2003_server
OR
microsoftwindows_server_2003
OR
microsoftwindows_server_2008Match-
OR
microsoftwindows_server_2008Match-x64

8.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:C/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%