Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Managed Services Accelerator Open Redirect Vulnerability
Vulnerability Description
A vulnerability in the web interface of Cisco Managed Services Accelerator (MSX) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting a user's HTTP request and modifying it into a request that causes the web interface to redirect the user to a specific malicious URL. A successful exploit could allow the attacker to redirect a user to a malicious web page. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites.
CVSS Information
N/A
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
Cisco Managed Services Accelerator 输入验证错误漏洞
Vulnerability Description
Cisco Managed Services Accelerator（MSX）是美国思科（Cisco）公司的一套多租户、多服务、云原生的服务创建和交付平台。 Cisco Managed Services Accelerator (MSX) 3.7.0之前版本中的Web界面存在输入验证错误漏洞，该漏洞源于程序没有对HTTP请求的参数执行正确地输入验证。远程攻击者可通过拦截并修改用户HTTP请求利用该漏洞将用户重定向到恶意的Web页面。
CVSS Information
N/A
Vulnerability Type
N/A