PT-2021-14851
CVE-2021-22098
·
Published
2021-08-11
·
Updated
2021-08-19
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
UAA server versions prior to 75.4.0
Description
The issue allows a malicious user to exploit an open redirect vulnerability through social engineering, potentially leading to the takeover of victims' accounts and redirection of UAA users to malicious sites.
Recommendations
For UAA server versions prior to 75.4.0, update to version 75.4.0 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾