CVE-2020-24551CWE-601

IProom MMC+ Server - URL Redirection to Untrusted Site (Open Redirect')

Medium · published October 14, 2020

CVSS v3.1
6.1
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00649 · 50.5th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2020-10-14T12:45Z
EPSS history
Timeline
  • 14 OCT 12:45Z
    IProom MMC+ Server - URL Redirection to Untrusted Site (Open Redirect')
    cvelistv5