Lucene search

K
redosRedosROS-20240606-08
HistoryJun 06, 2024 - 12:00 a.m.

ROS-20240606-08

2024-06-0600:00:00
redos.red-soft.ru
6
portainer
open redirection
vulnerability
arbitrary site
unix

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.5%

A vulnerability in the Portainer container management platform is related to the use of open redirection.
Exploitation of the vulnerability could allow an attacker to redirect a user to an arbitrary site

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64portainer-ce< 2.20.1-1UNKNOWN

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.5%