Description
Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg2C1000124
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/93512
Scores
CVSS v3
6.8
EPSS
0.0109
EPSS Percentile
61.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
Details
CWE
CWE-601
Status
published
Products (3)
ibm/cloud_orchestrator
2.4.0.0
ibm/cloud_orchestrator
2.4.0.1
ibm/cloud_orchestrator
2.4.0.2
Published
Oct 16, 2016
Tracked Since
Feb 18, 2026