Open Redirect Vulnerability in IBM Records Manager Affects Multiple Versions
CVE-2010-3320

Currently unrated

Key Information:

Vendor
IBM
Status
Filenet Content Manager
Vendor
CVE Published:
13 September 2010

Summary

An open redirect vulnerability exists in IBM Records Manager versions 4.5.x prior to 4.5.1.1-IER-FP001, allowing remote attackers to manipulate redirect behavior. This flaw enables malicious actors to redirect legitimate users to arbitrary web pages, potentially facilitating phishing scams. The lack of proper validation checks allows these redirects via unspecified vectors, posing significant security risks. Organizations using affected versions of IBM Records Manager should promptly apply patches or updates to mitigate this vulnerability and protect against potential exploitation.

References

http://www.securityfocus.com/bid/43136
vdb-entryx_refsource_BID
http://secunia.com/advisories/41344
third-party-advisoryx_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426
vendor-advisoryx_refsource_AIXAPAR

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.