HP System Management Homepage CVE-2014-7874 Unspecified Cross Site Request Forgery Vulnerability
BID:70443
Info
HP System Management Homepage CVE-2014-7874 Unspecified Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 70443 |
| Class: | Design Error |
| CVE: |
CVE-2014-7874 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 13 2014 12:00AM |
| Updated: | Oct 13 2014 12:00AM |
| Credit: | HP |
| Vulnerable: |
HP System Management Homepage 3.2.7 HP System Management Homepage 3.2.2 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0.1 .73 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 2.2.9 .1 HP System Management Homepage 2.2.8 HP System Management Homepage 2.2.6 HP System Management Homepage 2.1.15 210 HP System Management Homepage 2.1.15 HP System Management Homepage 2.1.12 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 .132 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP System Management Homepage 3.0.2.77 B HP System Management Homepage 3.0.2-77 HP System Management Homepage 3.0.2 HP System Management Homepage 3.0.1-73 HP System Management Homepage 3.0.1 HP System Management Homepage 3.0.0-68 HP System Management Homepage 3.0.0 HP System Management Homepage 2.1.8.179 HP System Management Homepage 2.1.6.156 HP System Management Homepage 2.1.5.146 B HP System Management Homepage 2.1.5.146 HP System Management Homepage 2.1.4.143 HP System Management Homepage 2.1.2.127 HP System Management Homepage 2.1.15-210 HP System Management Homepage 2.1.14.20 HP System Management Homepage 2.1.14 HP System Management Homepage 2.1.12.201 HP System Management Homepage 2.1.11.197 A HP System Management Homepage 2.1.10.186 C HP System Management Homepage 2.1.10.186 B HP System Management Homepage 2.1.10.186 HP System Management Homepage 2.1.0.121 HP System Management Homepage 2.0.2.106 HP System Management Homepage 2.0.1.104 HP HP-UX B.11.31 HP HP-UX B.11.23 |
| Not Vulnerable: | |
Discussion
HP System Management Homepage CVE-2014-7874 Unspecified Cross Site Request Forgery Vulnerability
HP System Management Homepage is prone to an unspecified cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application; other attacks are also possible.
HP System Management Homepage is prone to an unspecified cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application; other attacks are also possible.
Exploit / POC
HP System Management Homepage CVE-2014-7874 Unspecified Cross Site Request Forgery Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim into visiting a malicious webpage.
To exploit this issue an attacker must entice an unsuspecting victim into visiting a malicious webpage.
Solution / Fix
HP System Management Homepage CVE-2014-7874 Unspecified Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
HP System Management Homepage CVE-2014-7874 Unspecified Cross Site Request Forgery Vulnerability
References:
References: