Vulnerability in Ericsson Drutt Mobile Service Delivery Platform
CVE-2015-2167
Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp.
EPSS: 0.012 (64.5th percentile) — read the EPSS interpretation.
Affected products
- Ericsson Drutt_mobile_service_delivery_platform — versions 4.0, 5.0, 6.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)