CVE-2014-5127

CVE-2014-5127

EPSS 2.1%

Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://packetstormsecurity.com/files/128013/Encore-Discovery-Solution-4.3-Open-Redirect-Session-Token-In-URL.html https://exchange.xforce.ibmcloud.com/vulnerabilities/95568 http://www.securityfocus.com/archive/1/533233/100/0/threaded http://www.securityfocus.com/bid/69427