CVE-2019-6035 - Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page

Back Back to CVE browser

MEDIUM

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page

Published Dec 26, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 1.12%

Description

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.

Affected products

Vendor Verison Media Product Athenz Default
n/a
- Version
  v1.8.24 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Verison Media

Athenz

n/a

Version	Status	Constraints
v1.8.24 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (6)

http://jvn.jp/en/jp/JVN57070811/index.html
x_refsource_MISCThird Party Advisory
https://github.com/AthenZ/athenz/commit/c4dc89b31fda501af45c20b33db620a077079744
https://github.com/advisories/GHSA-9hg5-7hwc-v434
Advisory
https://github.com/yahoo/athenz
x_refsource_MISCProduct
https://github.com/yahoo/athenz/pull/700
x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-6035

Link	Providers	Tags
http://jvn.jp/en/jp/JVN57070811/index.html		x_refsource_MISCThird Party Advisory
https://github.com/AthenZ/athenz/commit/c4dc89b31fda501af45c20b33db620a077079744
https://github.com/advisories/GHSA-9hg5-7hwc-v434		Advisory
https://github.com/yahoo/athenz		x_refsource_MISCProduct
https://github.com/yahoo/athenz/pull/700		x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-6035