CVEvulnerability
CVE-2015-1921
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-05-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Open redirect vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
Affected configurations
• ibm websphere portal 8.0.0.0
• ibm websphere portal 8.0.0.1
• ibm websphere portal 8.5.0.0
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI38632 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21884060 Vendor Advisory
- http://www.securityfocus.com/bid/74705 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI38632 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21884060 Vendor Advisory
- http://www.securityfocus.com/bid/74705 Third Party Advisory, VDB Entry