Cisco Intelligent Automation for Cloud URL Redirection Vulnerability

A vulnerability in the URL redirection of Cisco Intelligent Automation for Cloud could allow an authenticated, remote attacker to obtain sensitive information.

The vulnerability is due to improper sanitization of redirect URLs. An attacker could exploit this vulnerability by submitting crafted URLs.

Cisco has confirmed the vulnerability in a security notice; however, software updates are not available.

After a successful exploit, the attacker could redirect a targeted user to a malicious site in an attempt to obtain sensitive information.