Multiple Cisco Products CVE-2018-15403 Open Redirect Vulnerability
BID:105696
Info
Multiple Cisco Products CVE-2018-15403 Open Redirect Vulnerability
| Bugtraq ID: | 105696 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2018-15403 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 03 2018 12:00AM |
| Updated: | Oct 03 2018 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Unity Connection (UC) 0 Cisco Unified Communications Manager IM and Presence Service 0 Cisco Unified Communications Manager - Cisco Emergency Responder |
| Not Vulnerable: | |
Discussion
Multiple Cisco Products CVE-2018-15403 Open Redirect Vulnerability
Multiple Cisco Products are prone to an open redirect vulnerability.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
Multiple Cisco Products are prone to an open redirect vulnerability.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
Exploit / POC
Multiple Cisco Products CVE-2018-15403 Open Redirect Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].