CVEvulnerability
CVE-2010-2337
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-07-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.
Affected configurations
• rsa federated identity manager 4.0
• rsa federated identity manager 4.1
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2010-07/0187.html archives.neohapsis.com
- http://osvdb.org/66504 osvdb.org
- http://secunia.com/advisories/40704 Vendor Advisory
- http://www.securityfocus.com/bid/41850 www.securityfocus.com
- http://www.securitytracker.com/id?1024239 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/1880 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60564 exchange.xforce.ibmcloud.com
- https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8692 knowledge.rsasecurity.com
- http://archives.neohapsis.com/archives/bugtraq/2010-07/0187.html archives.neohapsis.com
- http://osvdb.org/66504 osvdb.org
- http://secunia.com/advisories/40704 Vendor Advisory
- http://www.securityfocus.com/bid/41850 www.securityfocus.com
- http://www.securitytracker.com/id?1024239 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/1880 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60564 exchange.xforce.ibmcloud.com
- https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8692 knowledge.rsasecurity.com