CVE-2018-14931

MEDIUMNuclei

Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2018-14931 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. An open redirect exists via a /IntellectMain.jsp?IntellectSystem= URI.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMPolarisft Intellect Core Banking Software Version 9.7.1 - Open RedirectCVSS 6.1

Polarisft Intellect Core Banking Software Version 9.7.1 is susceptible to an open redirect issue in the Core and Portal modules via the /IntellectMain.jsp?IntellectSystem= URI.

Impact

An attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the theft of sensitive information.

Remediation

Apply the latest security patches or updates provided by Polarisft to fix the open redirect vulnerability.

WeaknessesCWE-601
Authors0x_Akoko
Template tagscvecve2018redirectpolarisftintellectvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:polarisft:intellect_core_banking:9.7.1:*:*:*:*:*:*:*
https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software_31.html https://nvd.nist.gov/vuln/detail/CVE-2018-14931 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

2