CVE-2010-3283: Input Validation
Published Sep 24, 2010
·Updated
Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
65 affected components
HP System Management Homepage=2.1.9-178
HP System Management Homepage=2.1.11.197-a
HP System Management Homepage=2.1.2-127
HP System Management Homepage=2.1.10.186-b
HP System Management Homepage=6.1
HP System Management Homepage=2.1.5.146
HP System Management Homepage=2.1.11-197
HP System Management Homepage=2.1.14.20
HP System Management Homepage=2.1.2
HP System Management Homepage=2.1.14.204
HP System Management Homepage=2.1.6
HP System Management Homepage=2.0.2
HP System Management Homepage=3.0.2-77
HP System Management Homepage=2.1.12.201
HP System Management Homepage=2.1.8-177
HP System Management Homepage=2.1.8.179
HP System Management Homepage=2.1.15.210
HP System Management Homepage=2.1.4-143
HP System Management Homepage=2.2.6
HP System Management Homepage=2.1.0-103
HP System Management Homepage=2.1.11
HP System Management Homepage=2.1.6.156
HP System Management Homepage=3.0.0.64
HP System Management Homepage=2.1.12-118
HP System Management Homepage=2.0.1.104
HP System Management Homepage=2.1.1
HP System Management Homepage=2.1.8
HP System Management Homepage=2.0.0
HP System Management Homepage=2.1.0.121
HP System Management Homepage=3.0.1-73
HP System Management Homepage=3.0.1.73
HP System Management Homepage=2.1.0-103\(a\)
HP System Management Homepage=2.1.5.146-b
HP System Management Homepage=2.0.1
HP System Management Homepage=6.0.0.96
HP System Management Homepage=2.1.0-109
HP System Management Homepage=2.1.7.168
HP System Management Homepage=2.1.5-146
HP System Management Homepage=2.1.12-200
HP System Management Homepage=3.0.2.77-b
HP System Management Homepage=2.1.0-118
HP System Management Homepage=3.0.2.77
HP System Management Homepage=2.1.10.186
HP System Management Homepage=2.2.8
HP System Management Homepage=2.1.9
HP System Management Homepage<=6.1.0.102
HP System Management Homepage=2.1.5
HP System Management Homepage=2.1.3
HP System Management Homepage=6.0.0-95
HP System Management Homepage=2.1.2.127
HP System Management Homepage=2.1.3.132
HP System Management Homepage=2.1.7
HP System Management Homepage=2.1.6-156
HP System Management Homepage=2.0.2.106
HP System Management Homepage=2.1.7-168
HP System Management Homepage=2.1.10
HP System Management Homepage=2.1.10.186-c
HP System Management Homepage=2.1
HP System Management Homepage=2.1.10-186
HP System Management Homepage=3.0.0-68
HP System Management Homepage=2.1.4
HP System Management Homepage=2.1.4.143
HP System Management Homepage=6.1.0-103
HP System Management Homepage=6.0
HP System Management Homepage=2.1.15-210
Event History
Sep 24, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3283?
CVE-2010-3283 is rated as a moderate severity vulnerability due to its potential for enabling phishing attacks.
2
How do I fix CVE-2010-3283?
To fix CVE-2010-3283, you should update the HP System Management Homepage to version 6.2 or later.
3
What are the consequences of not addressing CVE-2010-3283?
Not addressing CVE-2010-3283 could lead to unauthorized redirection of users to malicious sites, resulting in phishing and credential theft.
4
Which versions of HP System Management Homepage are affected by CVE-2010-3283?
CVE-2010-3283 affects versions of HP System Management Homepage prior to version 6.2.
5
Can CVE-2010-3283 be exploited remotely?
Yes, CVE-2010-3283 can be exploited remotely by attackers to redirect users to arbitrary websites.