Open Redirect Vulnerability in Sun Java Web Console by Sun Microsystems

CVE-2008-5550

Summary

An open redirect vulnerability exists in the login module of Sun Java Web Console, specifically within the BeginLogin.jsp file. This flaw allows remote attackers to manipulate the redirect_url parameter, potentially leading users to malicious sites. Such exploitation may facilitate phishing attacks, thereby compromising user credentials and sensitive information. With versions 3.0.2 through 3.0.5 of Sun Java Web Console and Solaris 10 being affected, it is imperative for users to apply security measures to mitigate risks associated with this vulnerability.

References