Cisco Catalyst Center Software HTTP Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

指向未可信站点的URL重定向(开放重定向)

Cisco Catalyst Center Virtual Appliance 输入验证错误漏洞

Cisco Catalyst Center Virtual Appliance是美国思科（Cisco）公司的一个网络控制器和自动化管理平台。 Cisco Catalyst Center Virtual Appliance存在输入验证错误漏洞，该漏洞源于基于Web管理界面HTTP请求参数验证不当，可能导致重定向至恶意网页。

N/A

N/A