JVN#45633549: Library Information Management System LIMEDIO vulnerable to open redirect

Library Information Management System LIMEDIO provided by RICOH COMPANY, LTD. contains an open redirect vulnerability (CWE-601).

Impact

When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Solution

Apply a workaround
Applying the following workaround may mitigate the impacts of this vulnerability.

• Enable Transition Destination Restriction Function
  According to the developer, Transition Destination Restriction Function is disabled in the initial configuration.

Products Affected

• Library Information Management System LIMEDIO, all versions