Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.8
CVSSv2

CVE-2012-3540

Published: 05/09/2012 Updated: 07/11/2023
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Subscribe to Openstack

Vulnerability Summary

Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by mistake.

Vulnerable Product Search on Vulmon Subscribe to Product

openstack horizon 2012.1

Vendor Advisories

Red Hat: Low: python-django-horizon security update
Synopsis Low: python-django-horizon security update Type/Severity Security Advisory: Low Topic Updated python-django-horizon packages that fix one security issue are nowavailable for Red Hat OpenStack EssexThe Red Hat Security Response Team has rated this update as having lowsecurity impact A Common Vulne ...
Debian CVElist Bug Report Logs: Tracking CVE-2012-3540
Debian Bug report logs - #686050 Tracking CVE-2012-3540 Package: horizon; Maintainer for horizon is Debian OpenStack <team+openstack@trackerdebianorg>; Reported by: Thomas Goirand <zigo@debianorg> Date: Tue, 28 Aug 2012 03:09:01 UTC Severity: grave Found in version 201211-3 Fixed in version horizon/201211-4 ...
Ubuntu Security Notice: horizon vulnerability
OpenStack Horizon could help expose sensitive information ...

References

CWE-20https://github.com/openstack/horizon/commit/35eada8a27323c0f83c400177797927aba6bc99bhttp://www.securityfocus.com/bid/55329http://www.openwall.com/lists/oss-security/2012/08/30/5http://secunia.com/advisories/50480https://lists.launchpad.net/openstack/msg16278.htmlhttps://lists.launchpad.net/openstack/msg16281.htmlhttp://www.openwall.com/lists/oss-security/2012/08/30/4https://bugs.launchpad.net/horizon/+bug/1039077http://www.ubuntu.com/usn/USN-1565-1https://exchange.xforce.ibmcloud.com/vulnerabilities/78196https://access.redhat.com/errata/RHSA-2012:1380https://usn.ubuntu.com/1565-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644unprivilegedCVE-2024-3494CVE-2024-22460CVE-2024-26026CVE-2024-23473firewallCVE-2024-28889XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook