CVEvulnerability
CVE-2019-14912
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-09-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-601
Description
An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie.
Affected configurations
• prise adas 1.7.0
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- http://www.adas-sso.com/es/extra/download.php Vendor Advisory
- https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas Exploit, Third Party Advisory
- http://www.adas-sso.com/es/extra/download.php Vendor Advisory
- https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas Exploit, Third Party Advisory