Lucene search

K
cveMitreCVE-2008-2027
HistoryApr 30, 2008 - 2:10 p.m.

CVE-2008-2027

2008-04-3014:10:00
CWE-200
mitre
web.nvd.nist.gov
22
cve-2008-2027
open redirect vulnerability
webid
iiswebagentif.dll
rsa authentication agent
phishing attacks
nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

73.9%

Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when accessed via certain browsers such as Mozilla Firefox, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an ftp URL in the url parameter to a Redirect action.

Affected configurations

Nvd
Node
rsaauthentication_agentMatch5.3.0.258
VendorProductVersionCPE
rsaauthentication_agent5.3.0.258cpe:2.3:a:rsa:authentication_agent:5.3.0.258:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

73.9%

Related for CVE-2008-2027