Description (CNA)
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ping Identity / PingAM | affected 7.5.0; affected 7.4.0 through 7.4.1; affected 7.3.0 through 7.3.1; affected 7.2.0 through 7.2.2; affected 7.1.0 through 7.1.4; affected 0 through 7.0.2 |
CWE
CWE-601
References
- https://backstage.forgerock.com/downloads/browse/am/featured
- https://backstage.forgerock.com/knowledge/advisories/article/a63463303
ADP enrichment
No English description supplied.
No references supplied.