6.8

CVE-2016-5878

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Filenet Workplace Version 4.0.2.0
Ibm ≫ Filenet Workplace Version 4.0.2.1
Ibm ≫ Filenet Workplace Version 4.0.2.2
Ibm ≫ Filenet Workplace Version 4.0.2.3
Ibm ≫ Filenet Workplace Version 4.0.2.4
Ibm ≫ Filenet Workplace Version 4.0.2.5
Ibm ≫ Filenet Workplace Version 4.0.2.6
Ibm ≫ Filenet Workplace Version 4.0.2.7
Ibm ≫ Filenet Workplace Version 4.0.2.8
Ibm ≫ Filenet Workplace Version 4.0.2.9
Ibm ≫ Filenet Workplace Version 4.0.2.10
Ibm ≫ Filenet Workplace Version 4.0.2.11
Ibm ≫ Filenet Workplace Version 4.0.2.12
Ibm ≫ Filenet Workplace Version 4.0.2.13
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.81% 0.519
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 2.3 4
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
NIST 4.9 6.8 4.9
AV:N/AC:M/Au:S/C:P/I:P/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

http://www-01.ibm.com/support/docview.wss?uid=swg21987721
Patch
Vendor Advisory
http://www.securityfocus.com/bid/92279