Lucene search

MitreCVE-2014-4696

HistoryJul 02, 2014 - 10:35 a.m.

CVE-2014-4696

2014-07-0210:35:26

mitre

web.nvd.nist.gov

cve-2014-4696

suricata

pfsense

open redirect vulnerabilities

web security

phishing attacks

nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

53.4%

JSON

Multiple open redirect vulnerabilities in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the referer parameter to suricata_rules_flowbits.php or (2) the returl parameter to suricata_select_alias.php.

Affected configurations

Nvd

Node

netgatepfsenseRange≤2.1.4

netgatepfsenseMatch2.1.3

pfsensesuricata_packageRange≤1.0.5

VendorProductVersionCPE
netgatepfsense*cpe:2.3:a:netgate:pfsense:*:*:*:*:*:*:*:*
netgatepfsense2.1.3cpe:2.3:a:netgate:pfsense:2.1.3:*:*:*:*:*:*:*
pfsensesuricata_package*cpe:2.3:a:pfsense:suricata_package:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgate	pfsense	*	cpe:2.3:a:netgate:pfsense::::::::
netgate	pfsense	2.1.3	cpe:2.3:a:netgate:pfsense:2.1.3:::::::*
pfsense	suricata_package	*	cpe:2.3:a:pfsense:suricata_package::::::::

References

pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

53.4%

JSON

Related for CVE-2014-4696