Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Hpux | — | Update SysMgmtHomepage.SMH-ASSIST to the latest versionUpdate SysMgmtHomepage.SMH-UILIB to the latest versionUpdate SysMgmtHomepage.SMH-SDK to the latest versionUpdate SysMgmtHomepage.SMH-DOC to the latest versionUpdate SysMgmtHomepage.SMH-XLAUNCH to the latest versionUpdate SysMgmtHomepage.SMH-PPAGES-COM to the latest versionUpdate SysMgmtHomepage.SMH-SAMLOG to the latest versionUpdate SysMgmtHomepage.SMH-RUN to the latest versionUpdate SysMgmtHomepage.SMH-PPAGES to the latest versionUpdate SysMgmtHomepage.SMH-UILIB-COM to the latest versionUpdate SysMgmtHomepage.SMH-DOC-COM to the latest version | Aug 11, 2017 | Oct 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub