ID de Prueba:	1.3.6.1.4.1.25623.1.0.804416
Categoría:	Web application abuses
Título:	HP/HPE System Management Homepage (SMH) CSRF Vulnerability (HPSBMU02947)
Resumen:	HP/HPE System Management Homepage (SMH) is prone to a cross-site; request forgery (CSRF) vulnerability.
Descripción:	Summary: HP/HPE System Management Homepage (SMH) is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Insight: The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. Vulnerability Impact: Successful exploitation will allow attackers to perform certain unspecified actions when a logged-in user visits a specially crafted web page. Affected Software/OS: HP/HPE SMH version 7.1 through 7.2.2. Solution: Update to version 7.3 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6188 HPdes Security Advisory: HPSBMU02947 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04039138 HPdes Security Advisory: SSRT101149
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.