PT-2017-16582 · Flexera · Flexnet Publisher

Publicado 2017-03-03 · Atualizado 2018-05-30 · CVE-2017-5571

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FlexNet Publisher versions 11.14.1 and earlier

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks.

Recommendations For versions 11.14.1 and earlier, update to a version later than 11.14.1 to resolve the issue.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2017-5571

Produtos afetados

Flexnet Publisher

Referências · 8

• https://support.citrix.com/article/CTX219885 · Nota
• https://citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager · Nota
• https://osv.dev/vulnerability/CVE-2017-5571 · Aviso do Fabricante
• https://schneider-electric.com/en/download/document/SEVD-2018-144-01 · Nota
• http://securityfocus.com/bid/96028 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5571 · Nota de Segurança
• https://schneider-electric.com/en/download/document/SEVD-2018-137-01 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01 · Nota