Lucene search

K
cve[email protected]CVE-2014-8670
HistoryNov 06, 2014 - 3:55 p.m.

CVE-2014-8670

2014-11-0615:55:14
web.nvd.nist.gov
17
vbulletin
open redirect
cve-2014-8670
phishing
security vulnerability

6.9 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

71.5%

Open redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Affected configurations

NVD
Node
vbulletinvbulletinMatch4.2.1
CPENameOperatorVersion
vbulletin:vbulletinvbulletineq4.2.1

6.9 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

71.5%

Related for CVE-2014-8670