This host is running HP System Management Homepage (SMH) and is prone to cross-site request forgery vulnerability.

Successful exploitation will allow attackers to perform certain unspecified actions when a logged-in user visits a specially crafted web page. Impact Level: Application

Upgrade to HP System Management Homepage (SMH) 7.3 or later, http://h18013.www1.hp.com/products/servers/management/agents/index.html

The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests.

HP System Management Homepage (SMH) version 7.1 through 7.2.2

Get the installed version of HP SMH with the help of detect NVT and check it is vulnerable or not.

• http://seclists.org/bugtraq/2014/Mar/61
• http://secunia.com/advisories/57365
• http://www.osvdb.org/104376

---

Updated on 2015-03-25