Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4818
HistoryMar 13, 2012 - 12:00 a.m.

CVE-2011-4818

2012-03-1300:00:00
ubuntu.com
ubuntu.com
6

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.4%

Open redirect vulnerability in IBM Maximo Asset Management and Asset
Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users
to redirect users to arbitrary web sites and conduct phishing attacks via
the uisessionid parameter to an unspecified component.

Notes

Author Note
mdeslaur This is a mistake. The actual CVE is CVE-2010-4818. This CVE is unrelated to Ubuntu.

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.4%