26 matches found
CVE-2018-7473
CVE-2018-7473: Open redirect in the SO Connect SO WIFI hotspot web interface (versions before 140) allows remote attackers to redirect users to arbitrary websites via a URL, enabling phishing. Affected product: SO WIFI hotspot web interface. Impact: user redirection/phishing discussed in sources;...
CVE-2017-7473
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA based off of CNT 3. Further investigation determined that there was a secure method for using the directive. Notes: none...
CVE-2017-7473
CVE-2017-7473 is withdrawn as a candidate. Connected documents confirm the issue concerns Ansible (versions 2.2.3 and earlier) with information disclosure caused by the interaction of callback plugins and the no_log directive, leading to improper sanitization of leaked data. The vulnerability aff...
CVE-2014-7473
CVE-2014-7473 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2015-7473
CVE-2015-7473 affects IBM WebSphere MQ 8.0.0.0–8.0.0.4, where runmqsc on a locally connected queue manager can bypass queue-manager command access restrictions by abusing +connect and +dsp privileges. The root cause is improper access control for certain local MQSC commands, allowing a user with ...