Описание
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks
Ссылки
- Product
- MitigationVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.0.2 (включая)Версия от 7.1.0 (включая) до 7.1.4 (включая)Версия от 7.2.0 (включая) до 7.2.2 (включая)
Одно из
cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*
cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*
cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*
cpe:2.3:a:forgerock:access_management:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:forgerock:access_management:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:forgerock:access_management:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:forgerock:access_management:7.4.1:*:*:*:*:*:*:*
cpe:2.3:a:forgerock:access_management:7.5.0:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00247
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-601
CWE-601
Связанные уязвимости
CVSS3: 6.1
github
больше 1 года назад
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks
EPSS
Процентиль: 48%
0.00247
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-601
CWE-601