Open Redirect Vulnerability in Ericsson Drutt Mobile Service Delivery Platform
CVE-2015-2167

Currently unrated

Key Information:

Vendor

Ericsson

Status
Drutt Mobile Service Delivery Platform
Vendor
CVE Published:
6 April 2015

What is CVE-2015-2167?

The Drutt Mobile Service Delivery Platform from Ericsson contains an open redirect vulnerability within the 3PI Manager component. This weakness allows remote attackers to redirect users to arbitrary websites by manipulating the URL parameter in the jsp/start-3pi-manager.jsp file. Such a vulnerability can be exploited to conduct phishing attacks, putting user credentials and sensitive information at risk. Organizations using affected versions of the NSSP must prioritize mitigation strategies to safeguard users from potential threats.

References

http://packetstormsecurity.com/files/131230/Ericsson-Drut...
x_refsource_MISC
http://www.securityfocus.com/bid/73934
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.