Lucene search

PRIOn knowledge basePRION:CVE-2016-3687

HistoryJun 16, 2016 - 6:59 p.m.

Open redirect

2016-06-1618:59:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

7 High

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

51.4%

JSON

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO), allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the SSO_ORIG_URI parameter.

CPENameOperatorVersion
big-ip_access_policy_managereq11.5.2
big-ip_access_policy_managereq11.5.0
big-ip_access_policy_managereq11.5.1
big-ip_access_policy_managereq11.2.1
big-ip_access_policy_managereq11.5.3
big-ip_access_policy_managereq11.4.0
big-ip_access_policy_managereq11.5.4
big-ip_access_policy_managereq11.6.0
big-ip_access_policy_managereq11.4.1
big-ip_edge_gatewayeq11.2.1

Name	Operator	Version
big-ip_access_policy_manager	eq	11.5.2
big-ip_access_policy_manager	eq	11.5.0
big-ip_access_policy_manager	eq	11.5.1
big-ip_access_policy_manager	eq	11.2.1
big-ip_access_policy_manager	eq	11.5.3
big-ip_access_policy_manager	eq	11.4.0
big-ip_access_policy_manager	eq	11.5.4
big-ip_access_policy_manager	eq	11.6.0
big-ip_access_policy_manager	eq	11.4.1
big-ip_edge_gateway	eq	11.2.1

References

www.securitytracker.com/id/1036111

support.f5.com/kb/en-us/solutions/public/k/26/sol26738102.html

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

7 High

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for PRION:CVE-2016-3687