Vulnerability in IBM Tririga Application Platform

CVE-2014-8894

Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the out parameter.

EPSS: 0.010 (58.0th percentile) — read the EPSS interpretation.

Affected products

Ibm Tririga_application_platform — versions 3.2.1, 3.3.2.0, 3.3.2.1
N/a — versions n/a

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (vdb-entry, x_refsource_BID)
psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)