Open Redirect Vulnerability in IBM Security Secret Server

CVE-2020-4840

What is CVE-2020-4840?

IBM Security Secret Server version 10.6 is vulnerable to an open redirect flaw, which can be exploited by remote attackers to execute phishing schemes. By tricking victims into visiting a specially crafted web page, an attacker can manipulate the displayed URL, leading users to a malicious site made to look trustworthy. This exploitation can result in the capture of sensitive information or serve as a gateway for further malicious activities against the unwitting victim.

References