NVD

Id
19466  
Name
CVE-2016-3687  
Description
Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO), allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the SSO_ORIG_URI parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-06-16  
Modified Date
2016-06-20  
Seq
2016-3687  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107164 19466 CVE-2016-3687 1036111  View
107165 19466 CVE-2016-3687 https://support.f5.com/kb/en-us/solutions/public/k/26/sol26738102.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2510 JVNDB-2016-003283 F5 BIG-IP APM および Edge Gateway におけるオープンリダイレクトの脆弱性 F5 BIG-IP APM および Edge Gateway には、マルチドメインのシングルサインオン (SSO) を使用する場合、オープンリダイレクトの脆弱性が存在します。 CVE-2016-3687 90193 CVE-2016-3687 19466 4 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003283.html 2016-06-13 2016-06-21 View