CVE-2024-34328

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...

CVE-2024-34328

The access control system Sielox AnyWare v2.1.2 is vulnerable to an open redirect caused by improper validation of the Host header when generating absolute URLs during redirection. An attacker can craft a URL with a modified Host header to redirect users to a malicious domain, potentially enablin...

PT-2025-31458 · Sielox · Sielox Anyware

Name of the Vulnerable Software and Affected Versions: Sielox AnyWare version 2.1.2 Description: An open redirect exists in Sielox AnyWare, potentially allowing attackers to perform a man-in-the-middle attack using a specially crafted URL. Recommendations: At the moment, there is no information...