CVE-2011-1860 Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc service center | = 6.2.8 | No fix listed |
| HP Inc service manager | = 7.02 | No fix listed |
| HP Inc service manager | = 7.11 | No fix listed |
| HP Inc service manager | = 9.20 | No fix listed |
| HP Inc service manager | = 9.21 | No fix listed |
References
- SSRT100487 vendor-advisory
- 44836 third-party-advisory
- 8273 third-party-advisory
- 48168 vdb-entry
- 1025611 vdb-entry
- hp-service-unspec-session-hijacking(67911) vdb-entry