CVE-2012-4032: Input Validation
Published Jul 17, 2012
·Updated
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx.
Affected Software
7 affected components
WebsitePanel WebsitePanel<=1.2.1
WebsitePanel WebsitePanel=1.0.0
WebsitePanel WebsitePanel=1.0.1
WebsitePanel WebsitePanel=1.0.2
WebsitePanel WebsitePanel=1.1.0
WebsitePanel WebsitePanel=1.1.2
WebsitePanel WebsitePanel=1.2.0
Event History
Jul 17, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4032?
CVE-2012-4032 is classified as a moderate severity vulnerability due to its potential for exploitation in phishing attacks.
2
How do I fix CVE-2012-4032?
To fix CVE-2012-4032, upgrade WebsitePanel to version 1.2.2.1 or later.
3
What type of vulnerability is CVE-2012-4032?
CVE-2012-4032 is an open redirect vulnerability affecting the login page of WebsitePanel.
4
Who is affected by CVE-2012-4032?
Users running affected versions of WebsitePanel prior to 1.2.2.1 are at risk of CVE-2012-4032.
5
What can attackers do with CVE-2012-4032?
Attackers can exploit CVE-2012-4032 to redirect users to arbitrary websites, enabling phishing attacks.