CVEvulnerability
CVE-2015-3898
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-02-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-601
Description
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1) bonita/login.jsp or (2) bonita/loginservice.
Affected configurations
• bonitasoft bonita bpm portal (< 6.5.3)
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- http://packetstormsecurity.com/files/132237/Bonita-BPM-6.5.1-Directory-Traversal-Open-Redirect.html Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/535733/100/0/threaded Exploit, Third Party Advisory, VDB Entry
- https://www.htbridge.com/advisory/HTB23259 Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/132237/Bonita-BPM-6.5.1-Directory-Traversal-Open-Redirect.html Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/535733/100/0/threaded Exploit, Third Party Advisory, VDB Entry
- https://www.htbridge.com/advisory/HTB23259 Exploit, Third Party Advisory