Описание
Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
Комментарий
Per: http://cwe.mitre.org/data/definitions/601.html
CWE-601: URL Redirection to Untrusted Site
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:sterling_control_center:5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_control_center:5.4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_control_center:5.4.1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00141
Низкий
3.5 Low
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
EPSS
Процентиль: 35%
0.00141
Низкий
3.5 Low
CVSS2
Дефекты
NVD-CWE-Other