HP System Management Homepage(SMH) Unspecified URI Redirection Vulnerability

Bugtraq ID:	43423
Class:	Input Validation Error
CVE:	CVE-2010-1586
Remote:	Yes
Local:	No
Published:	Sep 22 2010 12:00AM
Updated:	Sep 22 2010 12:00AM
Credit:	Aung Khant
Vulnerable:	HP System Management Homepage 6.1 HP System Management Homepage 6.0
Not Vulnerable:	HP System Management Homepage 6.2

HP System Management Homepage(SMH) Unspecified URI Redirection Vulnerability

HP System Management Homepage is prone to an unspecified open-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible.

Versions prior to HP System Management Homepage 6.2 (for Linux and Windows) are vulnerable.

HP System Management Homepage(SMH) Unspecified URI Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to following a malicious URI.

HP System Management Homepage(SMH) Unspecified URI Redirection Vulnerability

Solution:
Updates are available. Please see the references for more information.

HP System Management Homepage(SMH) Unspecified URI Redirection Vulnerability

References:

• HP System Management Homepage (HP)
  
• HPSBMA02583 SSRT100070 rev.1 - HP System Management Homepage (SMH) for Linux and (HP)