6.4
CVSSv2

CVE-2014-8489

Published: 12/12/2014 Updated: 16/12/2014
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

Open redirect vulnerability in startSSO.ping in the SP Endpoints in Ping Identity PingFederate 6.10.1 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the TargetResource parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

pingidentity pingfederate 6.10.1

Exploits

PingFederate 6101 SP Endpoints suffers from an insecure open redirection vulnerability ...