CVE-2011-3846 in System Management Homepage

Summary

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 09/26/2011
• Disclosure: 04/12/2012
• Moderation: VulDB entry created
• Entries: VDB-5288 (1)
• CPE: ready
• CWE: CWE-352 (Confirmed)
• CVSS: 8.8
• EPSS: 0.00119
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3846
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3846
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3846/