NVD

Id
86337  
Name
CVE-2015-5241  
Description
After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible for malicious users to redirect the browser to an unintended web page in Apache jUDDI 3.1.2, 3.1.3, 3.1.4, and 3.1.5 when utilizing the portlets based user interface also known as 'Pluto', 'jUDDI Portal', 'UDDI Portal' or 'uddi-console'. User session data, credentials, and auth tokens are cleared before the redirect.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-06-04  
Published
2017-05-19  
Modified Date
2017-05-31  
Seq
2015-5241  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419341 86337 CVE-2017-7413 https://lists.horde.org/archives/horde/Week-of-Mon-20170403/056767.html  View
423013 86337 CVE-2017-2173 JVNDB-2017-000096  View
423014 86337 CVE-2017-2173 JVN#85512750  View
423015 86337 CVE-2017-2173 https://www.ipa.go.jp/sec/info/20170519.html  View
423016 86337 CVE-2017-2173 JVNDB-2017-000096  View
423017 86337 CVE-2017-2173 JVN#85512750  View
423018 86337 CVE-2017-2173 https://www.ipa.go.jp/sec/info/20170519.html  View

Related JVN