Описание
Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage parameter.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:novell:zenworks_configuration_management:11.2:*:*:*:*:*:*:*
cpe:2.3:a:novell:zenworks_configuration_management:11.2.1:*:*:*:*:*:*:*
cpe:2.3:a:novell:zenworks_configuration_management:11.2.2:*:*:*:*:*:*:*
cpe:2.3:a:novell:zenworks_configuration_management:11.2.3:*:*:*:*:*:*:*
EPSS
Процентиль: 83%
0.02021
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
около 3 лет назад
Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage parameter.
EPSS
Процентиль: 83%
0.02021
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-20