Lucene search

K
cve[email protected]CVE-2008-5550
HistoryDec 12, 2008 - 6:30 p.m.

CVE-2008-5550

2008-12-1218:30:03
web.nvd.nist.gov
24
cve-2008-5550
open redirect
sun java web console
remote attackers
phishing attacks

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the redirect_url parameter.

Affected configurations

NVD
Node
sunjava_web_consoleMatch3.0.2
OR
sunjava_web_consoleMatch3.0.3
OR
sunjava_web_consoleMatch3.0.4
OR
sunjava_web_consoleMatch3.0.5
OR
sunsolarisMatch10sparc
OR
sunsolarisMatch10x86
OR
sunsunosMatch5.10

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

Related for CVE-2008-5550