CVE-2012-0128: Input Validation
Published Apr 4, 2012
·Updated
HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
32 affected components
HP Onboard Administrator<=3.32
HP Onboard Administrator=1.00
HP Onboard Administrator=1.01
HP Onboard Administrator=1.10
HP Onboard Administrator=1.11
HP Onboard Administrator=1.12
HP Onboard Administrator=1.20
HP Onboard Administrator=1.30
HP Onboard Administrator=2.01
HP Onboard Administrator=2.02-a
HP Onboard Administrator=2.04
HP Onboard Administrator=2.10
HP Onboard Administrator=2.11
HP Onboard Administrator=2.12
HP Onboard Administrator=2.13
HP Onboard Administrator=2.20
HP Onboard Administrator=2.21
HP Onboard Administrator=2.25
HP Onboard Administrator=2.31
HP Onboard Administrator=2.32
HP Onboard Administrator=2.41
HP Onboard Administrator=2.50
HP Onboard Administrator=2.51
HP Onboard Administrator=2.52
HP Onboard Administrator=2.60
HP Onboard Administrator=3.00
HP Onboard Administrator=3.10
HP Onboard Administrator=3.11
HP Onboard Administrator=3.20-a
HP Onboard Administrator=3.21
HP Onboard Administrator=3.30
HP Onboard Administrator=3.31
Event History
Apr 4, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0128?
CVE-2012-0128 is considered a high severity vulnerability due to its potential for facilitating phishing attacks.
2
How do I fix CVE-2012-0128?
To fix CVE-2012-0128, upgrade your HP Onboard Administrator to version 3.50 or later.
3
What types of attacks are possible with CVE-2012-0128?
CVE-2012-0128 allows remote attackers to perform phishing attacks by redirecting users to arbitrary websites.
4
Which versions of HP Onboard Administrator are affected by CVE-2012-0128?
CVE-2012-0128 affects all versions of HP Onboard Administrator prior to 3.50.
5
Is there a workaround for CVE-2012-0128?
There are no known workarounds for CVE-2012-0128; the best option is to upgrade to the patched version.