JVN#73587943: Access analysis CGI An-Analyzer vulnerable to open redirect

Access analysis CGI An-Analyzer provided by ANGLERSNET Co,.Ltd. contains an open redirect vulnerability (CWE-601).

Impact

When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Solution

Apply the workaround
Delete loc.cgi file included in the product.
For more information, refer to the information provided by the developer.

Products Affected

• Access analysis CGI An-Analyzer released in 2023 December 31 and earlier