CVE-2013-1093

EPSS 2.02%
Veröffentlicht 17.06.2013 11:38:48
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Novell ≫ Zenworks Configuration Management Version11.2

Novell ≫ Zenworks Configuration Management Version11.2.1

Novell ≫ Zenworks Configuration Management Version11.2.2

Novell ≫ Zenworks Configuration Management Version11.2.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.02%	0.822

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.novell.com/support/kb/doc.php?id=7012027

http://www.novell.com/support/kb/doc.php?id=7012025

Vendor Advisory

http://www.novell.com/support/kb/doc.php?id=7012499

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-1093

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1093

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1093

EUVD