« Volver al listado

CVE-2011-1538

Estado: ModificadaMedia (4.9)—

Open redirect vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Proliant Support Pack

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1538",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-05-03T19:55:10.933",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=130331221326039&w=2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://secunia.com/advisories/44234",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://securityreason.com/securityalert/8236",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1025419",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=130331221326039&w=2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/44234",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/8236",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1025419",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Open redirect vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de redireccion involuntaria en HP ProLiant Support Pack (PSP) antes de v8.7 permite, a usuarios remotos autenticados, redirigir a los usuarios a otros sitios web de su elección y llevar a cabo ataques de phishing a través de vectores no especificados.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:29:34.730",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:proliant_support_pack:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B870126-05BF-4B7B-AEDC-DD191F106AF6",
              "versionEndIncluding": "8.6"
            },
            {
              "criteria": "cpe:2.3:a:hp:proliant_support_pack:8.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD081D90-9B6A-4ED8-AC24-92AB4E44AAA1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}