Описание
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:netegrity:siteminder:*:*:*:*:*:*:*:*
EPSS
Процентиль: 78%
0.01146
Низкий
6.8 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter.
EPSS
Процентиль: 78%
0.01146
Низкий
6.8 Medium
CVSS2
Дефекты
NVD-CWE-Other