CVE-2020-10775
published 2020-08-24CVE-2020-10775: An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites…
PriorityP426medium5.3CVSS 3.1
AVNACHPRNUIRSUCHINAN
EPSS
1.85%
76.7th percentile
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | virtualization | — | — |
| redhat | ovirt-engine | <= 4.4 | — |
| redhat | ovirt-engine | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
ovirt-engine: Redirect to arbitrary URL allows for phishing
vendor_redhat·2020-08-04·CVSS 5.3
CVE-2020-10775 [MEDIUM] CWE-451 ovirt-engine: Redirect to arbitrary URL allows for phishing
ovirt-engine: Redirect to arbitrary URL allows for phishing
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.
An Open redirect vulnerability was found in ovirt-engine versions 4.4.1 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.
S
GHSA
GHSA-7wqr-p83r-v6rj: An Open redirect vulnerability was found in ovirt-engine versions 4
ghsa_unreviewed·2022-05-24
CVE-2020-10775 [MEDIUM] GHSA-7wqr-p83r-v6rj: An Open redirect vulnerability was found in ovirt-engine versions 4
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.
No detection rules found.
No public exploits indexed.
2020-08-24
Published