CVE-2011-2941

2014-02-2615:55:08

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

49.6%

JSON

Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter.

Affected configurations

Nvd

Node

redhatjboss_enterprise_portal_platformRange≤5.1.1

redhatjboss_enterprise_portal_platformMatch4.3.0

redhatjboss_enterprise_portal_platformMatch4.3.0cp03

redhatjboss_enterprise_portal_platformMatch4.3.0cp04

redhatjboss_enterprise_portal_platformMatch4.3.0cp05

redhatjboss_enterprise_portal_platformMatch4.3.0cp06

redhatjboss_enterprise_portal_platformMatch4.3.0cp07

redhatjboss_enterprise_portal_platformMatch5.0.0

redhatjboss_enterprise_portal_platformMatch5.0.1

redhatjboss_enterprise_portal_platformMatch5.1.0

VendorProductVersionCPE
redhatjboss_enterprise_portal_platform*cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform4.3.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform4.3.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp03:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform4.3.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp04:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform4.3.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp05:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform4.3.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp06:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform4.3.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp07:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform5.0.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform5.0.1cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform5.1.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	jboss_enterprise_portal_platform	*	cpe:2.3:a:redhat:jboss_enterprise_portal_platform::::::::
redhat	jboss_enterprise_portal_platform	4.3.0	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:::::::*
redhat	jboss_enterprise_portal_platform	4.3.0	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp03::::::
redhat	jboss_enterprise_portal_platform	4.3.0	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp04::::::
redhat	jboss_enterprise_portal_platform	4.3.0	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp05::::::
redhat	jboss_enterprise_portal_platform	4.3.0	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp06::::::
redhat	jboss_enterprise_portal_platform	4.3.0	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:cp07::::::
redhat	jboss_enterprise_portal_platform	5.0.0	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0:::::::*
redhat	jboss_enterprise_portal_platform	5.0.1	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1:::::::*
redhat	jboss_enterprise_portal_platform	5.1.0	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0:::::::*