Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Cisco Smart Software Manager Satellite Open Redirect Vulnerability (Cisco Cisco Smart Software Manager On-Prem)

CVE-2021-1218
MEDIUM 4.6

En bref

Source
NVD
EPSS
EPSS 0.57 % · centile 47 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
cisco
Statut NVD
Modified

Rechercher sur…

Description

A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request that could cause the web application to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to redirect a user to a malicious website.

Faiblesses (CWE)

  • CWE-601 — Redirection d'URL vers un site non fiable (redirection ouverte)

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.0MEDIUM 4.6CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:Ncisco
CVSS 3.1MEDIUM 5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NNVD · nvd@nist.gov (Primary)
CVSS 3.0MEDIUM 4.6CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:NNVD · psirt@cisco.com (Secondary)
CVSS 2.0MEDIUM 4.9AV:N/AC:M/Au:S/C:P/I:P/A:NNVD · nvd@nist.gov (Primary)

Références européennes

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Cisco · Cisco Smart Software Manager On-Premaffected n/a

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD