CVE-2017-6670

CWE-601 — Open RedirectCWE-20 — Improper Input Validation4 documents4 sources
Severity
6.1MEDIUM
EPSS
0.3%
top 51.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Communications Domain Manager
Timeline
PublishedJun 13
Latest updateMay 17

Description

A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.1(7)ER1.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5cisco_unified_communications_domain_managerCisco Unified Communications Domain Manager

🔴Vulnerability Details

2
GHSA
GHSA-r3wx-q354-fc7x: A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user↗2022-05-17
▶
CVEList
CVE-2017-6670: A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user↗2017-06-13
▶

📋Vendor Advisories

1
Cisco
Cisco Unified Communications Domain Manager Open Redirect Vulnerability↗2017-06-07
▶
CVE-2017-6670 (MEDIUM CVSS 6.1) | A vulnerability in the web-based GU | cvebase.io