Lucene search
HistoryDec 15, 2014 - 6:59 p.m.
CVE-2014-6255
cve-2014-6255
open redirect vulnerability
zenoss core
security
nvd
phishing attacks
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.9%
Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the came_from parameter, aka ZEN-11998.
Affected configurations
Node
zenosszenoss_coreRange≤4.2.5
ORzenosszenoss_coreMatch2.4.0
ORzenosszenoss_coreMatch2.4.5
ORzenosszenoss_coreMatch2.5.0
ORzenosszenoss_coreMatch2.5.1
ORzenosszenoss_coreMatch2.5.2
ORzenosszenoss_coreMatch3.0.0
ORzenosszenoss_coreMatch3.0.1
ORzenosszenoss_coreMatch3.0.2
ORzenosszenoss_coreMatch3.0.3
ORzenosszenoss_coreMatch3.1.0
ORzenosszenoss_coreMatch3.2.0
ORzenosszenoss_coreMatch3.2.1
ORzenosszenoss_coreMatch4.2.0
ORzenosszenoss_coreMatch4.2.3
ORzenosszenoss_coreMatch4.2.4
Related
prion
prion
Open redirect
2014-12-15 18:59:00
cvelist
cvelist
CVE-2014-6255
2014-12-15 17:27:00
nvd
nvd
CVE-2014-6255
2014-12-15 18:59:08
cert
cert
Zenoss Core contains multiple vulnerabilities
2014-12-05 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.9%
Related for CVE-2014-6255