PT-2017-10737

CVE-2017-1000027

·

Published

2017-07-13

·

Updated

2017-07-21

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Koozali Foundation SME Server versions 8.x through 10.x
Description The issue concerns an open URL redirect vulnerability in the user web login function, which can result in unauthorized account access.
Recommendations For versions 8.x through 10.x, update the user web login function to prevent open URL redirects, ensuring that login requests are properly validated to prevent unauthorized access.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')
Related identifiers
CVE-2017-1000027
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com