CVE-2013-6188: CSRF

Published Mar 14, 2014

Updated

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected Software

4 affected components

HP System Management Homepage=7.1

HP System Management Homepage=7.2

HP System Management Homepage=7.2.1

HP System Management Homepage=7.2.2

Remediation

Patch Available

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04039138

Event History

Mar 14, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Data Sourced

via NVD·10:55 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6188?

CVE-2013-6188 is considered a medium severity vulnerability due to its potential to allow remote attackers to hijack authentication.

How do I fix CVE-2013-6188?

To fix CVE-2013-6188, it is recommended to upgrade to a later version of HP System Management Homepage that addresses this CSRF vulnerability.

What types of attacks are possible with CVE-2013-6188?

CVE-2013-6188 can enable attackers to perform unauthorized actions on behalf of victims through cross-site request forgery.

Which versions of HP System Management Homepage are affected by CVE-2013-6188?

CVE-2013-6188 affects HP System Management Homepage versions 7.1 through 7.2.2.

Is CVE-2013-6188 an easy vulnerability to exploit?

Exploitation of CVE-2013-6188 may be relatively straightforward given that it relies on CSRF techniques, which can be common in web applications.