IBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 252186.
References
Link | Resource |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/252186 | VDB Entry Vendor Advisory |
https://www.ibm.com/support/pages/node/7012613 | Mitigation Vendor Advisory |
Configurations
History
28 Jul 2023, 13:57
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
CPE | cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:* | |
References | (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/252186 - VDB Entry, Vendor Advisory | |
References | (MISC) https://www.ibm.com/support/pages/node/7012613 - Mitigation, Vendor Advisory | |
CWE | CWE-601 |
19 Jul 2023, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-07-19 01:15
Updated : 2024-02-05 00:01
NVD link : CVE-2023-30433
Mitre link : CVE-2023-30433
CVE.ORG link : CVE-2023-30433
JSON object : View
Products Affected
ibm
- security_verify_access
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')