Unscored severity · published Jul 28, 2010
CVE-2010-2337
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Federated Identity Manager · Rsa
4.0; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2337
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2337
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2010-07/0187.html
osvdb.org
http://osvdb.org/66504
Vendor Advisory
http://secunia.com/advisories/40704
www.securityfocus.com
http://www.securityfocus.com/bid/41850
www.securitytracker.com
http://www.securitytracker.com/id?1024239
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1880