cbcvebase.
CVE-2017-1287
published 2017-07-24

CVE-2017-1287: IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…

PriorityP421medium5.4CVSS 3.0
AVNACLPRLUIRSCCLILAN
EPSS
0.56%
42.6th percentile
IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Affected

14 ranges
VendorProductVersion rangeFixed in
ibmrational_rhapsody_design_manager——
ibmrational_rhapsody_design_manager——
ibmrational_rhapsody_design_manager——
ibmrational_rhapsody_design_manager——
ibmrational_rhapsody_design_manager——
ibmrational_rhapsody_design_manager——
ibmrational_rhapsody_design_manager——
ibmrhapsody_design_manager——
ibmrhapsody_design_manager——
ibmrhapsody_design_manager——
ibmrhapsody_design_manager——
ibmrhapsody_design_manager——
ibmrhapsody_design_manager——
ibmrhapsody_design_manager——

CVSS provenance

nvdv3.05.4MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.9MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.