Open Redirect in Ricoh Limedio
CVE-2019-6021
Open redirect vulnerability in Library Information Management System LIMEDIO all versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.
Vulnerability class: Open Redirect
EPSS: 0.009 (54.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Ricoh Limedio
- Ricoh Company, Ltd. Library Information Management System Limedio — versions all versions
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (Permissions Required, x_refsource_MISC, Vendor Advisory)
- vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-6021?
- CVE-2019-6021 is a medium-severity vulnerability in Ricoh Limedio, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2019-12-26.
- How severe is CVE-2019-6021?
- Medium severity. CVSS v3 base score is 6.1 out of 10.