Improper input validation in HP Insight Management Agents
CVE-2012-2004
Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.043 (90.2th percentile) — read the EPSS interpretation.
Affected products
- Hp Insight_management_agents — versions 6.30.0.0, 6.31.0.0, 6.40.0.0
- Microsoft Windows_2003_server
- Microsoft Windows_server_2003
- Microsoft Windows_server_2008
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (vdb-entry, x_refsource_BID)
- hp-security-alert@hp.com (x_refsource_OSVDB, vdb-entry)
- hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)