Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-6025
HistoryDec 26, 2019 - 4:15 p.m.

CVE-2019-6025

2019-12-2616:15:12
CWE-601
[email protected]
web.nvd.nist.gov
2

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

48.6%

JSON

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Advanced 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type Advanced 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type Advanced 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Premium 1.24 and earlier (Movable Type Premium), and Movable Type Premium (Advanced Edition) 1.24 and earlier (Movable Type Premium) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

Affected configurations

Nvd
Node
sixapartmovable_typeRange6.0–6.3.9
OR
sixapartmovable_typeRange7.0–7.1.3
OR
sixapartmovable_typeMatch6.5.0
OR
sixapartmovable_typeMatch6.5.1
Node
sixapartmovable_typeRange≤1.24advanced
OR
sixapartmovable_typeRange≤1.24premium
OR
sixapartmovable_typeRange6.0–6.3.9advanced
OR
sixapartmovable_typeRange7.0–7.1.3advanced
OR
sixapartmovable_typeMatch6.5.0advanced
OR
sixapartmovable_typeMatch6.5.1advanced
VendorProductVersionCPE
sixapartmovable_type*cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*
sixapartmovable_type6.5.0cpe:2.3:a:sixapart:movable_type:6.5.0:*:*:*:*:*:*:*
sixapartmovable_type6.5.1cpe:2.3:a:sixapart:movable_type:6.5.1:*:*:*:*:*:*:*
sixapartmovable_type*cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*
sixapartmovable_type*cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium:*:*:*
sixapartmovable_type6.5.0cpe:2.3:a:sixapart:movable_type:6.5.0:*:*:*:advanced:*:*:*
sixapartmovable_type6.5.1cpe:2.3:a:sixapart:movable_type:6.5.1:*:*:*:advanced:*:*:*

Related

cvelist 1
jvn 1
prion 1
cve 1
cvelist
cvelist
CVE-2019-6025
2019-12-26 15:16:50
jvn
jvn
JVN#65280626: Movable Type vulnerable to open redirect
2019-11-13 00:00:00
prion
prion
Open redirect
2019-12-26 16:15:00
cve
cve
CVE-2019-6025
2019-12-26 16:15:12

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

48.6%

JSON
Related for NVD:CVE-2019-6025
cvelist1jvn1prion1cve1