Lucene search

[email protected]NVD:CVE-2014-4696

HistoryJul 02, 2014 - 10:35 a.m.

CVE-2014-4696

2014-07-0210:35:26

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

53.4%

JSON

Multiple open redirect vulnerabilities in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the referer parameter to suricata_rules_flowbits.php or (2) the returl parameter to suricata_select_alias.php.

Affected configurations

Nvd

Node

netgatepfsenseRange≤2.1.4

netgatepfsenseMatch2.1.3

pfsensesuricata_packageRange≤1.0.5

VendorProductVersionCPE
netgatepfsense*cpe:2.3:a:netgate:pfsense:*:*:*:*:*:*:*:*
netgatepfsense2.1.3cpe:2.3:a:netgate:pfsense:2.1.3:*:*:*:*:*:*:*
pfsensesuricata_package*cpe:2.3:a:pfsense:suricata_package:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgate	pfsense	*	cpe:2.3:a:netgate:pfsense::::::::
netgate	pfsense	2.1.3	cpe:2.3:a:netgate:pfsense:2.1.3:::::::*
pfsense	suricata_package	*	cpe:2.3:a:pfsense:suricata_package::::::::

References

pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

53.4%

JSON

Related for NVD:CVE-2014-4696

cvelist1 prion1 cve1