Описание
Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. IBM X-Force ID: 83383.
Ссылки
- VDB EntryVendor Advisory
- PatchVendor Advisory
- VDB EntryVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:inotes:8.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:inotes:8.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:inotes:8.0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 36%
0.00154
Низкий
6.1 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-601
Связанные уязвимости
CVSS3: 6.1
github
больше 3 лет назад
Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. IBM X-Force ID: 83383.
EPSS
Процентиль: 36%
0.00154
Низкий
6.1 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-601