ID de Prueba:	1.3.6.1.4.1.25623.1.0.800759
Categoría:	Web application abuses
Título:	HP/HPE System Management Homepage (SMH) 'RedirectUrl' URI Redirection Vulnerability (HPSBMA02583)
Resumen:	HP/HPE System Management Homepage (SMH) is prone to a URL; redirection vulnerability.
Descripción:	Summary: HP/HPE System Management Homepage (SMH) is prone to a URL redirection vulnerability. Vulnerability Insight: Input data passed to the 'RedirectUrl' parameter in 'red2301.html' is not being properly validated. Vulnerability Impact: Successful exploitation will allow remote attackers to redirect to his choice of malicious site via the trusted vulnerable SMH url or aid in phishing attacks. Affected Software/OS: HP/HPE SMH version 2.x. Solution: Update to version 6.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1586 BugTraq ID: 39676 http://www.securityfocus.com/bid/39676 http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse XForce ISS Database: hp-smh-redirecturl-phishing(58107) https://exchange.xforce.ibmcloud.com/vulnerabilities/58107
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.