CVE-2017-8989

CWE-601 — Open Redirect3 documents3 sources
Severity
9.1CRITICAL
EPSS
0.6%
top 29.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Hewlett Packard Enterprise HPE Icewall DFWHP Icewall SSO
Timeline
PublishedAug 6
Latest updateMay 14

Description

A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 3.9 | Impact: 5.2

Affected Packages2 packages

▶NVDhp/icewall_sso10.0, 11.0+1
▶CVEListV5hewlett_packard_enterprise/hpe_icewall_dfwv10.0 and v11.0 on RHEL, HP-UX, and Windows

🔴Vulnerability Details

2
GHSA
GHSA-7w6j-444c-wpvq: A security vulnerability in HPE IceWall SSO Dfw 10↗2022-05-14
▶
CVEList
CVE-2017-8989: A security vulnerability in HPE IceWall SSO Dfw 10↗2018-08-06
▶
CVE-2017-8989 (CRITICAL CVSS 9.1) | A security vulnerability in HPE Ice | cvebase.io