Lucene search
HistoryJan 29, 2015 - 1:59 a.m.
CVE-2014-8894
ibm
tririga
application platform
open redirect vulnerability
cve-2014-8894
security
phishing
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.9%
Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the out parameter.
Affected configurations
Node
ibmtririga_application_platformMatch3.2.1
ORibmtririga_application_platformMatch3.3.2.0
ORibmtririga_application_platformMatch3.3.2.1
ORibmtririga_application_platformMatch3.3.2.2
ORibmtririga_application_platformMatch3.4.0.0
ORibmtririga_application_platformMatch3.4.0.1
ORibmtririga_application_platformMatch3.4.1.0
Related
nvd
nvd
CVE-2014-8894
2015-01-29 01:59:01
prion
prion
Open redirect
2015-01-29 01:59:00
ibm
ibm
cvelist
cvelist
CVE-2014-8894
2015-01-29 01:00:00
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.9%
Related for CVE-2014-8894