Vulnerability in Sun Java Web Console
CVE-2008-5550
Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the redirect_url parameter.
EPSS: 0.019 (77.6th percentile) — read the EPSS interpretation.
Affected products
- Sun Java_web_console — versions 3.0.2, 3.0.3, 3.0.4
- Sun Solaris — versions 10
- Sun Sunos — versions 5.10
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch)