HP System Management Homepage CVE-2014-2641 Unspecified Cross Site Request Forgery Vulnerability

Bugtraq ID:	70208
Class:	Design Error
CVE:	CVE-2014-2641
Remote:	Yes
Local:	No
Published:	Sep 30 2014 12:00AM
Updated:	Nov 17 2014 12:58AM
Credit:	HP
Vulnerable:	HP System Management Homepage 6.2.2 7 HP System Management Homepage 6.0 .96 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0.1 .73 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 2.2.9 .1 HP System Management Homepage 2.2.8 HP System Management Homepage 2.2.6 HP System Management Homepage 2.1.15 210 HP System Management Homepage 2.1.12 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 .132 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP System Management Homepage 7.0 HP System Management Homepage 6.3 HP System Management Homepage 6.2.0-12 HP System Management Homepage 6.2 HP System Management Homepage 6.1.0.103 HP System Management Homepage 6.1.0.102 HP System Management Homepage 6.1.0-103 HP System Management Homepage 6.1 HP System Management Homepage 6.0.0.95 HP System Management Homepage 6.0.0-95 HP System Management Homepage 6.0 HP System Management Homepage 3.0.2.77 B HP System Management Homepage 3.0.2-77 HP System Management Homepage 3.0.1-73 HP System Management Homepage 3.0.0-68 HP System Management Homepage 2.1.8.179 HP System Management Homepage 2.1.6.156 HP System Management Homepage 2.1.5.146 B HP System Management Homepage 2.1.5.146 HP System Management Homepage 2.1.4.143 HP System Management Homepage 2.1.2.127 HP System Management Homepage 2.1.15-210 HP System Management Homepage 2.1.14.20 HP System Management Homepage 2.1.12.201 HP System Management Homepage 2.1.11.197 A HP System Management Homepage 2.1.10.186 C HP System Management Homepage 2.1.10.186 B HP System Management Homepage 2.1.10.186 HP System Management Homepage 2.1.0.121 HP System Management Homepage 2.0.2.106 HP System Management Homepage 2.0.1.104
Not Vulnerable:

HP System Management Homepage CVE-2014-2641 Unspecified Cross Site Request Forgery Vulnerability

HP System Management Homepage is prone to an unspecified cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application; other attacks are also possible.

HP System Management Homepage 7.4 is vulnerable.

HP System Management Homepage CVE-2014-2641 Unspecified Cross Site Request Forgery Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim into visiting a malicious webpage.

HP System Management Homepage CVE-2014-2641 Unspecified Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP System Management Homepage CVE-2014-2641 Unspecified Cross Site Request Forgery Vulnerability

References:

• HP System Management Homepage (HP)