Skip to content
Sign in
Not rated

CVE-2017-1156 IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect…

Description

IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force. ID: 122592

Affected products and versions

Product Affected versions Fixed in
WebSphere Portal Versions not published

Other CVEs of WebSphere Portal

The 4 CVEs of WebSphere Portal →
CVE-2017-1120 IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting Not rated CVE-2016-8922 Exphox WebRadar is vulnerable to cross-site scripting Not rated CVE-2016-8936 IBM Social Rendering Templates for Digital Data Connector is vulnerable to cross-site scripting Not rated
Track this CVE