NVD

Id
32636  
Name
CVE-2014-4696  
Description
Multiple open redirect vulnerabilities in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the referer parameter to suricata_rules_flowbits.php or (2) the returl parameter to suricata_select_alias.php.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-07-02  
Modified Date
2014-07-02  
Seq
2014-4696  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171842 32636 CVE-2014-4696 https://pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14249 JVNDB-2014-003124 pfSense 用 Suricata パッケージにおけるオープンリダイレクトの脆弱性 pfSense 用 Suricata パッケージには、オープンリダイレクトの脆弱性が存在します。 CVE-2014-4696 71985 CVE-2014-4696 32636 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003124.html 2014-06-23 2014-07-04 View