Lucene search

K
cve[email protected]CVE-2012-4032
HistoryJul 17, 2012 - 9:55 p.m.

CVE-2012-4032

2012-07-1721:55:02
CWE-20
web.nvd.nist.gov
20
cve-2012-4032
open redirect
websitepanel
security vulnerability
phishing attack
nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.8%

Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx.

Affected configurations

NVD
Node
websitepanelwebsitepanelRange1.2.1
OR
websitepanelwebsitepanelMatch1.0.0
OR
websitepanelwebsitepanelMatch1.0.1
OR
websitepanelwebsitepanelMatch1.0.2
OR
websitepanelwebsitepanelMatch1.1.0
OR
websitepanelwebsitepanelMatch1.1.2
OR
websitepanelwebsitepanelMatch1.2.0

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.8%

Related for CVE-2012-4032