CVE-2010-2337: Input Validation
First published: Tue Jul 27 2010(Updated: )
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RSA Federated Identity Manager | =4.1 | |
| RSA Federated Identity Manager | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.vupen.com/english/advisories/2010/1880
- http://www.securityfocus.com/bid/41850
- https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8692
- http://secunia.com/advisories/40704
- http://www.securitytracker.com/id?1024239
- http://osvdb.org/66504
- http://archives.neohapsis.com/archives/bugtraq/2010-07/0187.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60564
Frequently Asked Questions
What is the severity of CVE-2010-2337?
CVE-2010-2337 has a medium severity rating due to its potential for phishing attacks.
How do I fix CVE-2010-2337?
To fix CVE-2010-2337, upgrade RSA Federated Identity Manager to versions 4.0.25 or 4.1.26 or later.
What systems are affected by CVE-2010-2337?
CVE-2010-2337 affects RSA Federated Identity Manager versions 4.0 before 4.0.25 and 4.1 before 4.1.26.
What type of attack is possible with CVE-2010-2337?
CVE-2010-2337 allows attackers to perform open redirect attacks leading to potential phishing.
When was CVE-2010-2337 disclosed?
CVE-2010-2337 was disclosed in July 2010.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/severity
- agent/trending
- agent/tags
- agent/source
- vendor/rsa
- canonical/rsa federated identity manager
- version/rsa federated identity manager/4.1
- version/rsa federated identity manager/4.0