Lucene search

[email protected]CVE-2010-2337

HistoryJul 28, 2010 - 12:48 p.m.

CVE-2010-2337

2010-07-2812:48:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2010-2337

open redirect vulnerability

rsa federated identity manager

remote attackers

phishing attacks

nvd

6.9 Medium

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.3%

JSON

Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.

CPENameOperatorVersion
rsa:federated_identity_managerrsa federated identity managereq4.1
rsa:federated_identity_managerrsa federated identity managereq4.0

CPE	Name	Operator	Version
rsa:federated_identity_manager	rsa federated identity manager	eq	4.1
rsa:federated_identity_manager	rsa federated identity manager	eq	4.0

References

archives.neohapsis.com/archives/bugtraq/2010-07/0187.html

osvdb.org/66504

secunia.com/advisories/40704

www.securityfocus.com/bid/41850

www.securitytracker.com/id?1024239

www.vupen.com/english/advisories/2010/1880

exchange.xforce.ibmcloud.com/vulnerabilities/60564

knowledge.rsasecurity.com/scolcms/set.aspx?id=8692

6.9 Medium

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.3%

JSON

Related for CVE-2010-2337

prion1 securityvulns1