CVE-2015-2167

2015-04-0615:59:03

[email protected]

web.nvd.nist.gov

cve-2015-2167

open redirect

vulnerability

ericsson

drutt

mobile service delivery platform

msdp

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.8%

JSON

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp.

Affected configurations

NVD

Node

ericssondrutt_mobile_service_delivery_platformMatch4.0

ericssondrutt_mobile_service_delivery_platformMatch5.0

ericssondrutt_mobile_service_delivery_platformMatch6.0

CPENameOperatorVersion
ericsson:drutt_mobile_service_delivery_platformericsson drutt mobile service delivery platformeq4.0
ericsson:drutt_mobile_service_delivery_platformericsson drutt mobile service delivery platformeq5.0
ericsson:drutt_mobile_service_delivery_platformericsson drutt mobile service delivery platformeq6.0

CPE	Name	Operator	Version
ericsson:drutt_mobile_service_delivery_platform	ericsson drutt mobile service delivery platform	eq	4.0
ericsson:drutt_mobile_service_delivery_platform	ericsson drutt mobile service delivery platform	eq	5.0
ericsson:drutt_mobile_service_delivery_platform	ericsson drutt mobile service delivery platform	eq	6.0