PT-2019-16853 · Ibm · Ibm Content Navigator

Publicado 2019-03-22 · Atualizado 2022-01-01 · CVE-2019-4035

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Content Navigator version 3.0CD

Description The issue allows attackers to redirect web traffic to a malicious site. By creating a fake IBM Content Navigator site, attackers can trick users into sending requests to their Edit client, which then downloads documents from the fake site.

Recommendations For IBM Content Navigator version 3.0CD, consider restricting access to the Edit client to minimize the risk of exploitation until a fix is available.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2019-4035

Produtos afetados

Ibm Content Navigator

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/156001 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4035 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=ibm10869060 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-4035 · Aviso do Fabricante
• http://securityfocus.com/bid/107557 · Nota