CVE-2005-0420

Опубликовано: 27 апр. 2005

Источник: nvd

CVSS2: 5.8

EPSS Средний

Описание

Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.

Ссылки

http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/14144
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/12459
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2005/0105
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/19225
Third Party Advisory
VDB Entry
http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/14144
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/12459
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2005/0105
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/19225
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2003:sp1:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.25559

Средний

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-ghcm-xhwj-hh9q

github

больше 4 лет назад