Open Redirect in Automated Logic, A Carrier Company Webctrl
CVE-2024-8526
A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously crafted URL, which when visited by an authenticated WebCTRL user, could result in the redirection of the user to a malicious webpage via "index.jsp"
Vulnerability class: Open Redirect
EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.
Affected products
- Automated Logic, A Carrier Company Webctrl — versions 7.0
- Carrier I-vu — versions 7.0
Weakness classification (CWE)
References
- productsecurity@carrier.com (vendor-advisory)
- productsecurity@carrier.com (government-resource)