PT-2018-4610 · Ibm · Ibm Emptoris Sourcing

Publicado 2018-02-02 · Atualizado 2018-02-16 · CVE-2016-0329

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Emptoris Sourcing versions 10.0.0.x through 10.0.0.1 iFix2 IBM Emptoris Sourcing versions 10.0.1.x through 10.0.1.3 iFix2 IBM Emptoris Sourcing versions 10.0.2.x through 10.0.2.8 IBM Emptoris Sourcing versions 10.0.4.0 through 10.0.4.0 iFix7 IBM Emptoris Sourcing versions 10.1.0.0 through 10.1.0.0 iFix2

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks.

Recommendations For IBM Emptoris Sourcing versions 10.0.0.x, update to 10.0.0.1 iFix3 or later. For IBM Emptoris Sourcing versions 10.0.1.x, update to 10.0.1.3 iFix3 or later. For IBM Emptoris Sourcing versions 10.0.2.x, update to 10.0.2.8 iFix1 or later. For IBM Emptoris Sourcing versions 10.0.4.0, update to 10.0.4.0 iFix8 or later. For IBM Emptoris Sourcing versions 10.1.0.0, update to 10.1.0.0 iFix3 or later.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2016-0329

Produtos afetados

Ibm Emptoris Sourcing

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-0329 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/111692 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0329 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21982629 · Aviso do Fabricante