CVE-2011-1826

EUVD-2011-1824
Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
caarcot_webfort_versatile_authentication_server
𝑥
≤ 6.2.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/72125
http://secunia.com/advisories/44317
http://www.securityfocus.com/archive/1/517702/100/0/threaded
http://www.securityfocus.com/bid/47588
http://www.securitytracker.com/id?1025444
http://www.vupen.com/english/advisories/2011/1114
https://exchange.xforce.ibmcloud.com/vulnerabilities/67105
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BA71F5839-D214-4719-B918-4476E4537998%7D
http://osvdb.org/72125
http://secunia.com/advisories/44317
http://www.securityfocus.com/archive/1/517702/100/0/threaded
http://www.securityfocus.com/bid/47588
http://www.securitytracker.com/id?1025444
http://www.vupen.com/english/advisories/2011/1114
https://exchange.xforce.ibmcloud.com/vulnerabilities/67105
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BA71F5839-D214-4719-B918-4476E4537998%7D