Oracle Identity Manager 'backUrl' Parameter URL Redirection Vulnerability

Bugtraq ID:	66615
Class:	Unknown
CVE:	CVE-2014-2880
Remote:	Yes
Local:	No
Published:	Apr 03 2014 12:00AM
Updated:	Oct 15 2014 12:01AM
Credit:	Giuseppe D'Amore
Vulnerable:	Oracle Identity Manager 11.1.1.5
Not Vulnerable:

Oracle Identity Manager 'backUrl' Parameter URL Redirection Vulnerability

Oracle Identity Manager is prone to a remote URL-redirection vulnerability.

An attacker can leverage this issue by constructing a URI that includes a malicious site redirection. When an unsuspecting victim follows the URI, they may be redirected to an attacker-controlled site; this may aid in phishing attacks.

Oracle Identity Manager 11g R2 SP1(11.1.2.1.0) is vulnerable.

Oracle Identity Manager 'backUrl' Parameter URL Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim into following a malicious URI.

The following example URL is available:

https://www.example.com/identity/faces/firstlogin?action=changepwd&backUrl=[URL REDIRECTION]

Oracle Identity Manager 'backUrl' Parameter URL Redirection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Identity Manager 'backUrl' Parameter URL Redirection Vulnerability

References:

• Oracle Homepage (Oracle)