NVD

Id
4118  
Name
CVE-2008-4284  
Description
Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage feature.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-03  
Published
2009-02-10  
Modified Date
2009-02-11  
Seq
2008-4284  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26249 4118 CVE-2008-4284 http://www-1.ibm.com/support/docview.wss?uid=swg21320242  View
26250 4118 CVE-2008-4284 PK71126  View
26251 4118 CVE-2008-4284 33700  View
26252 4118 CVE-2008-4284 websphere-logoutexitpage-disclosure(47200)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40083 JVNDB-2009-001089 IBM WebSphere Application Server における任意の Web サイトへリダイレクトされる脆弱性 IBM WebSphere Application Server (WAS) の ibm_security_logout サーブレットには、logoutExitPage 機能に関して不備があるため、ユーザを任意の Web サイトへリダイレクト可能な脆弱性が存在します。 CVE-2008-4284 34397 CVE-2008-4284 4118 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001089.html 2009-02-10 2009-03-24 View