CVE:CVE-2013-4820
CNNVD:CNNVD-201309-395
HP IceWall SSO等都是美国惠普（HP）公司的产品。SSO是一套Web单点登录解决方案。IceWall File Manager是一套文件管理解决方案。
多款HP产品中存在远程安全漏洞。远程经过授权的用户可利用该漏洞获得敏感信息。以下产品及版本受到影响：IceWall SSO 8.0至10.0版本，IceWall SSO Agent Option 8.0至10.0版本，IceWall SSO Smart Device Option 10.0版本，IceWall SSO SAML2 Agent Option 8.0版本，IceWall SSO JAVA Agent Library 8.0至10.0版本，IceWall Federation Agent 3.0版本，IceWall File Manager 3.0至SP4版本。
solution:Upgrade hp icewall_smart_device_option to a higher version than 10.0,and avoid the version 10.0; Upgrade hp icewall_sso_agent to a higher version than 8.0,8.0:r2,8.0:r3,8.0.1,10.0,and avoid the version 8.0,8.0:r2,8.0:r3,8.0.1,10.0; Upgrade hp icewall_sso_saml2_option to a higher version than 8.0,and avoid the version 8.0; Upgrade hp icewall_file_manager to a higher version than 3.0,3.0:sp1,3.0:sp2,3.0:sp3,3.0:sp4,and avoid the version 3.0,3.0:sp1,3.0:sp2,3.0:sp3,3.0:sp4; Upgrade hp icewall_java_agent_library to a higher version than 8.0,10.0,and avoid the version 8.0,10.0; Upgrade hp icewall_federation_agent to a higher version than 8.0,and avoid the version 8.0; Upgrade hp icewall_sso_agent_option to a higher version than 8.0,10.0,10.0:r1,and avoid the version 8.0,10.0,10.0:r1