CVE-2012-3540
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.9%
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by mistake.
Produtos afetados
n/a · n/aReferências
https://bugs.launchpad.net/horizon/+bug/1039077http://secunia.com/advisories/50480https://exchange.xforce.ibmcloud.com/vulnerabilities/78196https://github.com/openstack/horizon/commit/35eada8a27323c0f83c400177797927aba6bc99bhttps://lists.launchpad.net/openstack/msg16278.htmlhttps://lists.launchpad.net/openstack/msg16281.htmlhttp://www.openwall.com/lists/oss-security/2012/08/30/4http://www.openwall.com/lists/oss-security/2012/08/30/5http://www.securityfocus.com/bid/55329http://www.ubuntu.com/usn/USN-1565-1