Lucene search

K
jvnJapan Vulnerability NotesJVN:68340046
HistoryMay 08, 2014 - 12:00 a.m.

JVN#68340046: intra-mart vulnerable to open redirect

2014-05-0800:00:00
Japan Vulnerability Notes
jvn.jp
15

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.002

Percentile

64.7%

intra-mart is a software framework for creating web applications. intra-mart contains an open redirect vulnerability.

Impact

When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Solution

Apply the Patch
Apply the appropriate patch according to the information provided by the developer.

Products Affected

  • WebPlatform / AppFramework Ver 6.0 to 7.2

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.002

Percentile

64.7%

Related for JVN:68340046