CVE-2008-2027
Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when accessed via certain browsers such as Mozilla Firefox, allows remote attackers to redirect users to arbitrary web sites and conduct…
Does this matter?
Lower severity and a low EPSS score (1.12%). Track it; it rarely justifies an emergency change on its own.
Description
Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when accessed via certain browsers such as Mozilla Firefox, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an ftp URL in the url parameter to a Redirect action.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 1.12% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- rsa/authentication agent
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/3850
- http://www.procheckup.com/Vulnerability_PR07-43.php
- http://www.securityfocus.com/archive/1/491237/100/0/threaded
- http://www.securityfocus.com/bid/28907
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42184
- http://securityreason.com/securityalert/3850
- http://www.procheckup.com/Vulnerability_PR07-43.php
- http://www.securityfocus.com/archive/1/491237/100/0/threaded
- http://www.securityfocus.com/bid/28907
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42184
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.