Lucene search

MitreCVE-2018-14931

HistoryApr 30, 2019 - 7:29 p.m.

CVE-2018-14931

2019-04-3019:29:02

CWE-601

mitre

web.nvd.nist.gov

cve-2018-14931

issue

core module

portal module

polaris ft intellect core banking 9.7.1

open redirect

nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

46.2%

JSON

An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. An open redirect exists via a /IntellectMain.jsp?IntellectSystem= URI.

Affected configurations

Nvd

Node

polarisftintellect_core_bankingMatch9.7.1

VendorProductVersionCPE
polarisftintellect_core_banking9.7.1cpe:2.3:a:polarisft:intellect_core_banking:9.7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
polarisft	intellect_core_banking	9.7.1	cpe:2.3:a:polarisft:intellect_core_banking:9.7.1:::::::*

References

neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software_31.html

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

46.2%

JSON

Related for CVE-2018-14931