CVE-2022-1019 — Automated Logic WebCtrl Server Open Redirection Vulnerability

CVE-2022-1019

Automated Logic WebCtrl Server Open Redirection Vulnerability PUBLISHED

Description (CNA)

Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file.

Affected (CNA)

Vendor / product	Versions
Automated Logic / WebCtrl Server	affected All through 7.0

CWE

CWE-601

References

https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf

ADP enrichment

CVE

No English description supplied.

https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf

CISA-ADP

No English description supplied.

No references supplied.