CVE-2011-3415

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 23%

probabilidade de exploração

23%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability."

Produtos afetados

n/a · n/a

Referências

http://jvndb.jvn.jp/jvndb/JVNDB-2011-003557 http://jvn.jp/en/jp/JVN71256611/index.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14815 http://www.securityfocus.com/bid/51202