What is CVE-2012-2012?

CVE-2012-2012 is a vulnerability in HP System Management Homepage. Published 2012-06-29.

Is CVE-2012-2012 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in HP System Management Homepage

CVE-2012-2012

HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

EPSS: 0.054 (91.8th percentile) — read the EPSS interpretation.

Affected products

Hp System_management_homepage — versions 2.0.0, 2.0.1, 2.0.1.104
Linux Linux_kernel
Microsoft Windows
N/a — versions n/a

Public proof-of-concept exploits

CVEDB/awesome-cve-repo

References

hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory, Patch)

Frequently asked questions

What is CVE-2012-2012?: CVE-2012-2012 is a vulnerability in HP System Management Homepage. Published 2012-06-29.
Is CVE-2012-2012 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.