Описание
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:rsa:federated_identity_manager:4.0:*:*:*:*:*:*:*
cpe:2.3:a:rsa:federated_identity_manager:4.1:*:*:*:*:*:*:*
EPSS
Процентиль: 65%
0.01177
Низкий
6 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
около 4 лет назад
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.
EPSS
Процентиль: 65%
0.01177
Низкий
6 Medium
CVSS2
Дефекты
CWE-20