Lucene search

K

MitreCVELIST:CVE-2003-1311

HistoryDec 15, 2006 - 7:00 p.m.

CVE-2003-1311

2006-12-1519:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter.

References

curl.haxx.se/mail/archive-2003-05/0172.html

www.osvdb.org/30741

6.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

Related for CVELIST:CVE-2003-1311