Lucene search

K
cve[email protected]CVE-2011-2941
HistoryFeb 26, 2014 - 3:55 p.m.

CVE-2011-2941

2014-02-2615:55:08
CWE-20
web.nvd.nist.gov
20
cve-2011-2941
open redirect
red hat jboss
enterprise portal platform
vulnerability
phishing
nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter.

Affected configurations

NVD
Node
redhatjboss_enterprise_portal_platformRange5.1.1
OR
redhatjboss_enterprise_portal_platformMatch4.3.0
OR
redhatjboss_enterprise_portal_platformMatch4.3.0cp03
OR
redhatjboss_enterprise_portal_platformMatch4.3.0cp04
OR
redhatjboss_enterprise_portal_platformMatch4.3.0cp05
OR
redhatjboss_enterprise_portal_platformMatch4.3.0cp06
OR
redhatjboss_enterprise_portal_platformMatch4.3.0cp07
OR
redhatjboss_enterprise_portal_platformMatch5.0.0
OR
redhatjboss_enterprise_portal_platformMatch5.0.1
OR
redhatjboss_enterprise_portal_platformMatch5.1.0

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

Related for CVE-2011-2941