Login Page Redirection Vulnerability in InterSystems Cache’ Products
CVE-2007-4427

Currently unrated

Key Information:

Vendor: Intersystems
Status: Cache Database
Vendor: CVE Published:; 20 August 2007

🔔 Create Intersystems Vulnerability Alert

What is CVE-2007-4427?

The vulnerability in the Cache' Server Page implementation allows authenticated users to manipulate data on the server due to improper handling of parameter values during redirection. This issue arises specifically from the encoding of these parameters, leading to potential alterations in server-side data. The incident highlights the importance of secure parameter management within web applications to mitigate risks associated with unauthorized data modification.

References

http://groups.google.com/group/intersystems-public-cache/...

mailing-listx_refsource_MLIST

http://osvdb.org/40178

vdb-entryx_refsource_OSVDB

http://secunia.com/advisories/26541

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 20, 2007
Vulnerability Reserved
Aug 20, 2007

CVE-2007-4427 Data

JSON