Vulnerability Bulletins |
IBM Security Bulletin: TRIRIGA Application Platform Open Redirect Vulnerabilities. (CVE-2014-8894) |
|
| Affected software | IBM |
|
IBM TRIRIGA Application Platform could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. By sending a specially crafted URL, an attacker could exploit this vulnerability using the out parameter to redirect a victim to arbitrary Web sites. CVE(s): CVE-2014-8894 Affected product(s) and affected version(s): IBM TRIRIGA Application Platform 3.4.1 and earlier versions IBM TRIRIGA Application Platform 3.3.2.2 and earlier versions IBM TRIRIGA Application More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_tririga_application_platform_open_redirect_vulnerabilities_cve_2014_8894?lang=en_us |
|