Open Redirect Vulnerability in IBM Jazz for Service Management

CVE-2019-4201

Summary

IBM Jazz for Service Management versions 1.1.3, 1.1.3.1, and 1.1.3.2 contain an open redirect vulnerability that could be exploited by attackers to manipulate users into visiting malicious websites. By leveraging this vulnerability, a remote attacker can spoof legitimate URLs, leading unsuspecting users to untrusted sites under the guise of safety. This can facilitate phishing attacks aimed at capturing sensitive information or escalating further attacks against victims.

References