HP Network Node Manager i CVE-2012-2022 Unspecified Cross Site Scripting vulnerability

Bugtraq ID:	54815
Class:	Input Validation Error
CVE:	CVE-2012-2022
Remote:	Yes
Local:	No
Published:	Aug 06 2012 12:00AM
Updated:	Aug 06 2012 12:00AM
Credit:	HP
Vulnerable:	HP Network Node Manager i 9.10 HP Network Node Manager i 9.03 HP Network Node Manager i 9.02 HP Network Node Manager i 9.01 HP Network Node Manager i 9.00 HP Network Node Manager i 8.1 HP Network Node Manager 8.13 HP Network Node Manager 8.12 HP Network Node Manager 8.11 HP Network Node Manager 8.10
Not Vulnerable:

HP Network Node Manager i CVE-2012-2022 Unspecified Cross Site Scripting vulnerability

HP Network Node Manager i is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

HP Network Node Manager i CVE-2012-2022 Unspecified Cross Site Scripting vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim to follow a malicious URI.

HP Network Node Manager i CVE-2012-2022 Unspecified Cross Site Scripting vulnerability

Solution:
Updates are available. Please see the references for details.

HP Network Node Manager i CVE-2012-2022 Unspecified Cross Site Scripting vulnerability

References:

• Micro News Homepage (phptoys)
  
• HPSBMU02798 SSRT100908 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux (HP)