Lucene search

MitreCVE-2011-4553

HistoryDec 06, 2011 - 11:55 a.m.

CVE-2011-4553

2011-12-0611:55:06

CWE-20

mitre

web.nvd.nist.gov

cve

2011

4553

open redirect

vulnerabilities

one click orgs

nvd

phishing

attacks

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

50.5%

JSON

Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the return_to parameter, and allow (2) remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via crafted characters in the domain name of a subdomain.

Affected configurations

Nvd

Node

oneclickorgsone_click_orgsRange≤1.2.2

oneclickorgsone_click_orgsMatch1.0.0

oneclickorgsone_click_orgsMatch1.0.1

oneclickorgsone_click_orgsMatch1.1.0

oneclickorgsone_click_orgsMatch1.1.1

oneclickorgsone_click_orgsMatch1.2.0

oneclickorgsone_click_orgsMatch1.2.1

VendorProductVersionCPE
oneclickorgsone_click_orgs*cpe:2.3:a:oneclickorgs:one_click_orgs:*:*:*:*:*:*:*:*
oneclickorgsone_click_orgs1.0.0cpe:2.3:a:oneclickorgs:one_click_orgs:1.0.0:*:*:*:*:*:*:*
oneclickorgsone_click_orgs1.0.1cpe:2.3:a:oneclickorgs:one_click_orgs:1.0.1:*:*:*:*:*:*:*
oneclickorgsone_click_orgs1.1.0cpe:2.3:a:oneclickorgs:one_click_orgs:1.1.0:*:*:*:*:*:*:*
oneclickorgsone_click_orgs1.1.1cpe:2.3:a:oneclickorgs:one_click_orgs:1.1.1:*:*:*:*:*:*:*
oneclickorgsone_click_orgs1.2.0cpe:2.3:a:oneclickorgs:one_click_orgs:1.2.0:*:*:*:*:*:*:*
oneclickorgsone_click_orgs1.2.1cpe:2.3:a:oneclickorgs:one_click_orgs:1.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oneclickorgs	one_click_orgs	*	cpe:2.3:a:oneclickorgs:one_click_orgs::::::::
oneclickorgs	one_click_orgs	1.0.0	cpe:2.3:a:oneclickorgs:one_click_orgs:1.0.0:::::::*
oneclickorgs	one_click_orgs	1.0.1	cpe:2.3:a:oneclickorgs:one_click_orgs:1.0.1:::::::*
oneclickorgs	one_click_orgs	1.1.0	cpe:2.3:a:oneclickorgs:one_click_orgs:1.1.0:::::::*
oneclickorgs	one_click_orgs	1.1.1	cpe:2.3:a:oneclickorgs:one_click_orgs:1.1.1:::::::*
oneclickorgs	one_click_orgs	1.2.0	cpe:2.3:a:oneclickorgs:one_click_orgs:1.2.0:::::::*
oneclickorgs	one_click_orgs	1.2.1	cpe:2.3:a:oneclickorgs:one_click_orgs:1.2.1:::::::*

References

dmcdonald.net/?page_id=43

groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

50.5%

JSON

Related for CVE-2011-4553