CVE-2015-0706

Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966.

Score

CVSS 2.0 5.8 Medium

Status

Modified - psirt@cisco.com

Published

2015-04-23

Last modified

2024-08-06

Affected products

• Firesight System Software (Cisco)

References

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38486