IBM WebSphere Commerce CVE-2017-1398 Unspecified Open Redirection Vulnerability
BID:99491
Info
IBM WebSphere Commerce CVE-2017-1398 Unspecified Open Redirection Vulnerability
| Bugtraq ID: | 99491 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-1398 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 06 2017 12:00AM |
| Updated: | Jul 06 2017 12:00AM |
| Credit: | John Moss |
| Vulnerable: |
IBM WebSphere Commerce 8.0.0.0 IBM WebSphere Commerce 7.0.0.0 IBM WebSphere Commerce 6.0.0.0 |
| Not Vulnerable: | |
Discussion
IBM WebSphere Commerce CVE-2017-1398 Unspecified Open Redirection Vulnerability
IBM WebSphere Commerce is prone to an unspecified open-redirection vulnerability.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
IBM WebSphere Commerce is prone to an unspecified open-redirection vulnerability.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
Exploit / POC
IBM WebSphere Commerce CVE-2017-1398 Unspecified Open Redirection Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
IBM WebSphere Commerce CVE-2017-1398 Unspecified Open Redirection Vulnerability
References:
References: