4 matches found
Open redirect
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2013-3997
The CVE-2013-3997 issue affects IBM InfoSphere BigInsights Web Application Enterprise Console (versions 1.1–2.1). The vulnerability is an open redirect that can be abused by authenticated users to redirect others to arbitrary sites, enabling phishing. Root cause details indicate improper input ha...
CVE-2013-3997: Improper Input Validation
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2013-3998: Improper Control of Generation of Code
CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...