This host is running HP System Management Homepage (SMH) and is prone to URL redirection vulnerability.

Successful exploitation will allow remote attackers to redirect to his choice of malicious site via the trusted vulnerable SMH url or aid in phishing attacks. Impact Level: Application

Upgrade HP System Management Homepage version to 6.2 or later For updates refer to http://www.hp.com/servers/manage/smh

Input data passed to the 'RedirectUrl' parameter in 'red2301.html' is not being properly validated.

HP System Management Homepage (SMH) version 2.x.

• http://xforce.iss.net/xforce/xfdb/58107
• http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse
• https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=SysMgmtWeb

---

Updated on 2015-03-25