Description (CNA)
An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.adas-sso.com/es/extra/download.php
- https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
ADP enrichment
No English description supplied.