CVE:CVE-2011-1860
CNNVD:CNNVD-201106-082
HP Service Manager 7.02，7.11，9.20和9.21版本及Service Center 6.2.8版本中存在会话劫持漏洞。由于会话证书的重新利用所产生的错误导致此漏洞，攻击者可利用该漏洞劫获HTTP会话证书。
solution:Upgrade hp service_center to a higher version than 6.2.8,and avoid the version 6.2.8; Upgrade hp service_manager to a higher version than 7.02,7.11,9.20,9.21,and avoid the version 7.02,7.11,9.20,9.21