5.4

CVE-2017-1287

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Rhapsody Design Manager Version5.0
Ibm ≫ Rhapsody Design Manager Version5.0.1
Ibm ≫ Rhapsody Design Manager Version5.0.2
Ibm ≫ Rhapsody Design Manager Version6.0
Ibm ≫ Rhapsody Design Manager Version6.0.1
Ibm ≫ Rhapsody Design Manager Version6.0.2
Ibm ≫ Rhapsody Design Manager Version6.0.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.241
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.4 2.3 2.7
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvd@nist.gov 4.9 6.8 4.9
AV:N/AC:M/Au:S/C:P/I:P/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.