Lucene search

IbmCVE-2014-4760

HistoryAug 12, 2014 - 5:01 a.m.

CVE-2014-4760

2014-08-1205:01:04

ibm

web.nvd.nist.gov

cve-2014-4760

ibm websphere

open redirect

vulnerability

security

nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

71.6%

JSON

Open redirect vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 before 8.0.0.1 CF13, and 8.5.0 before CF01 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected configurations

Nvd

Node

ibmwebsphere_portalMatch6.1.0.0

ibmwebsphere_portalMatch6.1.0.1

ibmwebsphere_portalMatch6.1.0.2

ibmwebsphere_portalMatch6.1.0.3

ibmwebsphere_portalMatch6.1.0.4

ibmwebsphere_portalMatch6.1.0.5

ibmwebsphere_portalMatch6.1.0.6

ibmwebsphere_portalMatch6.1.5.0

ibmwebsphere_portalMatch6.1.5.1

ibmwebsphere_portalMatch6.1.5.2

ibmwebsphere_portalMatch6.1.5.3

ibmwebsphere_portalMatch7.0.0.0

ibmwebsphere_portalMatch7.0.0.1

ibmwebsphere_portalMatch7.0.0.2

ibmwebsphere_portalMatch8.0.0.0

ibmwebsphere_portalMatch8.5.0.0

VendorProductVersionCPE
ibmwebsphere_portal6.1.0.0cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.1cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.2cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.3cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.4cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.5cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.6cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.5.0cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.5.1cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.5.2cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_portal	6.1.0.0	cpe:2.3:a:ibm:websphere_portal:6.1.0.0:::::::*
ibm	websphere_portal	6.1.0.1	cpe:2.3:a:ibm:websphere_portal:6.1.0.1:::::::*
ibm	websphere_portal	6.1.0.2	cpe:2.3:a:ibm:websphere_portal:6.1.0.2:::::::*
ibm	websphere_portal	6.1.0.3	cpe:2.3:a:ibm:websphere_portal:6.1.0.3:::::::*
ibm	websphere_portal	6.1.0.4	cpe:2.3:a:ibm:websphere_portal:6.1.0.4:::::::*
ibm	websphere_portal	6.1.0.5	cpe:2.3:a:ibm:websphere_portal:6.1.0.5:::::::*
ibm	websphere_portal	6.1.0.6	cpe:2.3:a:ibm:websphere_portal:6.1.0.6:::::::*
ibm	websphere_portal	6.1.5.0	cpe:2.3:a:ibm:websphere_portal:6.1.5.0:::::::*
ibm	websphere_portal	6.1.5.1	cpe:2.3:a:ibm:websphere_portal:6.1.5.1:::::::*
ibm	websphere_portal	6.1.5.2	cpe:2.3:a:ibm:websphere_portal:6.1.5.2:::::::*

Rows per page:

1-10 of 161

References

secunia.com/advisories/60597

www-01.ibm.com/support/docview.wss?uid=swg1PI19877

www-01.ibm.com/support/docview.wss?uid=swg21680230

www.securitytracker.com/id/1030669

exchange.xforce.ibmcloud.com/vulnerabilities/94657

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

71.6%

JSON

Related for CVE-2014-4760