CVE-2016-5715

Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users to arbitrary web…

published January 12, 2017

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the redirect parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6501.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01447 · 72.9th percentile
Published
2017-01-12T23:00Z
EPSS history
Timeline
  • 12 JAN 23:00Z
    Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users to arbitrary web…
    cvelistv5