CVEvulnerability
CVE-2016-0204
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-10-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.8 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-601
Description
Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected configurations
• ibm cloud orchestrator 2.4.0.0
• ibm cloud orchestrator 2.4.0.1
• ibm cloud orchestrator 2.4.0.2
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg2C1000124 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93512 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg2C1000124 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93512 Third Party Advisory, VDB Entry