CVE-2014-8489: Medium severity pingfederate vulnerability
Open redirect vulnerability in startSSO.ping in the SP Endpoints in Ping Identity PingFederate 6.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the TargetResource parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8489?
CVE-2014-8489 has a medium severity rating as it allows attackers to conduct phishing attacks through an open redirect.
How do I fix CVE-2014-8489?
To fix CVE-2014-8489, update PingFederate to a version that is not affected by this vulnerability, as security patches are usually released by the vendor.
What systems are impacted by CVE-2014-8489?
CVE-2014-8489 specifically affects PingFederate version 6.10.1 and allows potential attackers to redirect users.
What type of attack can be performed with CVE-2014-8489?
Attackers can exploit CVE-2014-8489 to perform open redirect attacks, enabling phishing or redirection to malicious websites.
Is CVE-2014-8489 exploitable remotely?
Yes, CVE-2014-8489 is exploitable remotely since it involves URL manipulation via the TargetResource parameter.