Improper input validation in HP System Management Homepage
CVE-2010-3011
CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.035 (88.1th percentile) — read the EPSS interpretation.
Affected products
- Hp System_management_homepage — versions 2.1.4-143, 2.1.0-109, 2.1.11-197
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)