CVE-2023-23957 - Open Redirection Vulnerability in Symantec Identity Portal 14.4

Back Back to CVE browser

MEDIUM

Open Redirection Vulnerability in Symantec Identity Portal 14.4

Published Sep 19, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.32%

Description

An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4

Affected products

Vendor Symantec - A Division of Broadcom Product Symantec Identity Governance And Administration Default
n/a
- Version
  14.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Symantec - A Division of Broadcom

Symantec Identity Governance And Administration

n/a

Version	Status	Constraints
14.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-28022
Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/22544
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-28022		Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/22544		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner symantec

Published Sep 19, 2023

Updated Sep 25, 2024

Reserved Jan 19, 2023

Link CVE-2023-23957

CISA Vulnrichment

Updated Sep 25, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-23957

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-23957

ENISA EUVD

Assigner symantec

Published Sep 19, 2023

Updated Sep 25, 2024

Exploited since n/a

Link EUVD-2023-28022

EUVD-2023-28022