intra-mart CVE-2014-1991 Open Redirection Vulnerability

Bugtraq ID:	67330
Class:	Input Validation Error
CVE:	CVE-2014-1991
Remote:	Yes
Local:	No
Published:	May 08 2014 12:00AM
Updated:	May 08 2014 12:00AM
Credit:	NTT DATA INTRAMART CORPORATION
Vulnerable:	NTT DATA INTRAMART CORPORATION WebPlatform / AppFramework 7.2 NTT DATA INTRAMART CORPORATION WebPlatform / AppFramework 7.1 NTT DATA INTRAMART CORPORATION WebPlatform / AppFramework 7.0 NTT DATA INTRAMART CORPORATION WebPlatform / AppFramework 6.1 NTT DATA INTRAMART CORPORATION WebPlatform / AppFramework 6.0
Not Vulnerable:

intra-mart CVE-2014-1991 Open Redirection Vulnerability

intra-mart is prone to an open-redirection vulnerability.

An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.

intra-mart WebPlatform / AppFramework 6.0, 6.1, 7.0, 7.1 and 7.2 are vulnerable.

intra-mart CVE-2014-1991 Open Redirection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

intra-mart CVE-2014-1991 Open Redirection Vulnerability

References:

• intra-mart - Homepage (NTT DATA INTRAMART CORPORATION)
  
• intra-mart open redirection Vulnerability (NTT DATA INTRAMART CORPORATION)