CVE-2023-23957: Open Redirection Vulnerability in Symantec Identity Portal 14.4
Published Sep 19, 2023
·Updated
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4
Affected Software
1 affected component
Symantec Identity Portal=14.4
Event History
Sep 19, 2023
CVE Published
via MITRE·12:30 PM
Data Sourced
via MITRE·12:30 PM
Description
Frequently Asked Questions
1
What is CVE-2023-23957?
CVE-2023-23957 is a vulnerability that allows an authenticated user to see and modify the value for the 'next' query parameter in Symantec Identity Portal 14.4.
2
What is the severity of CVE-2023-23957?
CVE-2023-23957 has a severity score of 5.4, which is considered medium.
3
How does CVE-2023-23957 affect Symantec Identity Portal?
CVE-2023-23957 allows an authenticated user to see and modify the value for the 'next' query parameter in Symantec Identity Portal 14.4.
4
How can an authenticated user exploit CVE-2023-23957?
An authenticated user can exploit CVE-2023-23957 by manipulating the value of the 'next' query parameter in Symantec Identity Portal 14.4.
5
Is there a fix available for CVE-2023-23957?
Yes, a fix for CVE-2023-23957 is available. Please refer to the official Symantec support website for the patch or update.