EUVD-2021-21422

Malware in sbrugna...

The vulnerability in the web interface of the Cisco Orbital endpoint protection service allows a hacker to redirect users to any desired website.

The vulnerability of the Cisco Orbital endpoint protection service’s web interface is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect a user to any desired website remotely...

CVE-2021-34772

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management interface. An attacker could exploit this...

Input validation

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management interface. An attacker could exploit this...

CVE-2021-34772 Cisco Orbital Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management interface. An attacker could exploit this...

CVE-2021-34772

The CVE-2021-34772 issue affects Cisco Orbital’s web-based management interface and is an open redirect caused by improper validation of URL paths. An unauthenticated, remote attacker can persuade a user to click a crafted URL, leading to the user being redirected to a malicious webpage. The vuln...

CVE-2021-34772

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management interface. An attacker could exploit this...

Cisco Orbital 输入验证错误漏洞

Cisco Orbital is a service from Cisco that adds Osquery to Secure Endpoint to support detailed and fast queries from incident responders. An input validation error vulnerability exists in the web-based management interface of Cisco Orbital, which stems from incorrect validation of URL paths in th...

CVE-2021-34772: URL Redirection to Untrusted Site

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management interface. An attacker could exploit this...