IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 184823.
References
Link | Resource |
---|---|
https://www.ibm.com/support/pages/node/6320061 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/184823 | VDB Entry Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2020-08-24 09:15
Updated : 2020-08-26 12:08
NVD link : CVE-2020-4598
Mitre link : CVE-2020-4598
JSON object : View
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
Products Affected
ibm
- security_guardium_insights
linux
- linux_kernel