CVE-2024-8148 — BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1)

CVE-2024-8148

BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1) PUBLISHED

Description (CNA)

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.2 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.

Affected (CNA)

Vendor / product	Versions
Esri / Portal for ArcGIS	affected all through 11.2

CWE

CWE-601

References

https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2024-update-2-released/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.