Improper input validation in Rsa Federated Identity Manager
CVE-2010-2337
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.
Affected products
- Rsa Federated_identity_manager — versions 4.0, 4.1
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- security_alert@emc.com (vdb-entry, x_refsource_BID)
- security_alert@emc.com (x_refsource_CONFIRM)
- security_alert@emc.com (x_refsource_OSVDB, vdb-entry)
- security_alert@emc.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- security_alert@emc.com (vdb-entry, x_refsource_XF)