CVE-2011-2941: Input Validation
First published: Wed Feb 26 2014(Updated: )
Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat JBoss Portal | =4.3.0-cp03 | |
| Red Hat JBoss Portal | =5.0.0 | |
| Red Hat JBoss Portal | =5.1.0 | |
| Red Hat JBoss Portal | =4.3.0-cp06 | |
| Red Hat JBoss Portal | =4.3.0-cp07 | |
| Red Hat JBoss Portal | =4.3.0 | |
| Red Hat JBoss Portal | <=5.1.1 | |
| Red Hat JBoss Portal | =4.3.0-cp05 | |
| Red Hat JBoss Portal | =5.0.1 | |
| Red Hat JBoss Portal | =4.3.0-cp04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability CVE-2011-2941?
CVE-2011-2941 is an open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform that allows attackers to redirect users to arbitrary websites.
Which versions of Red Hat JBoss Enterprise Portal Platform are affected by CVE-2011-2941?
CVE-2011-2941 affects versions before 5.2.0, including 4.3.0 and 5.0.0 to 5.1.0.
What are the potential risks associated with CVE-2011-2941?
The risks associated with CVE-2011-2941 include phishing attacks and unauthorized redirection of users.
How can organizations remediate CVE-2011-2941?
Organizations can remediate CVE-2011-2941 by upgrading to Red Hat JBoss Enterprise Portal Platform version 5.2.0 or later.
Is there a security patch available for CVE-2011-2941?
Yes, a security patch addressing CVE-2011-2941 has been released as part of the updates to Red Hat JBoss Enterprise Portal Platform.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/redhat
- canonical/red hat jboss portal
- version/red hat jboss portal/4.3.0-cp03
- version/red hat jboss portal/5.0.0
- version/red hat jboss portal/5.1.0
- version/red hat jboss portal/4.3.0-cp06
- version/red hat jboss portal/4.3.0-cp07
- version/red hat jboss portal/4.3.0
- version/red hat jboss portal/5.1.1
- version/red hat jboss portal/4.3.0-cp05
- version/red hat jboss portal/5.0.1
- version/red hat jboss portal/4.3.0-cp04