PT-2017-12202 · Thycotic · Thycotic Secret Server

Publicado 2017-07-29 · Atualizado 2017-08-09 · CVE-2017-11725

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Thycotic Secret Server versions prior to 10.2.000019

Description The issue arises from the share function in Thycotic Secret Server mishandling the Back Button, resulting in unintended redirections.

Recommendations For versions prior to 10.2.000019, update to version 10.2.000019 or later to resolve the issue.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2017-11725

Produtos afetados

Thycotic Secret Server

Referências · 3

• https://thycotic.com/products/secret-server/resources/advisories/thy-ss-009 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-11725 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11725 · Nota de Segurança