CVE-2012-2159

Опубликовано: 20 июн. 2012

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21596690
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21598423
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74832
http://www.ibm.com/support/docview.wss?uid=swg21596690
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21598423
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74832

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_appscan_source:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.5.0.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:spss_data_collection:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spss_data_collection:6.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00246

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-w2fg-wg6f-hgqg

github

больше 3 лет назад