CVE-2008-2027
 
Severity Score
5.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when accessed via certain browsers such as Mozilla Firefox, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an ftp URL in the url parameter to a Redirect action.
Vulnerabilidad de redirección libre en WebID/IISWebAgentIF.dll de RSA Authentication Agent 5.3.0.258 para Web para IIS; cuando se accede desde determinados navegadores como Mozilla Firefox, permite a atacantes remotos redirigir a los usuarios a sitios web elegidos por el atacante y realizar ataques de phishing mediante una URL de tipo ftp en el parámetro url de una acción Redirect.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-04-30 CVE Reserved
- 2008-04-30 CVE Published
- 2024-08-07 CVE Updated
- 2024-10-02 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
http://securityreason.com/securityalert/3850 | Third Party Advisory | |
http://www.procheckup.com/Vulnerability_PR07-43.php | X_refsource_misc | |
http://www.securityfocus.com/archive/1/491237/100/0/threaded | Mailing List | |
http://www.securityfocus.com/bid/28907 | Vdb Entry | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/42184 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Rsa Search vendor "Rsa" | Authentication Agent Search vendor "Rsa" for product "Authentication Agent" | 5.3.0.258 Search vendor "Rsa" for product "Authentication Agent" and version "5.3.0.258" | - |
Affected
|