CVE-2015-2863 Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users...
MediumCVSS 4.3
EPSS 10.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaseya virtual system administrator | >= 7.0, < 7.0.0.29 | 7.0.0.29 |
| kaseya virtual system administrator | >= 8.0, < 8.0.0.18 | 8.0.0.18 |
| kaseya virtual system administrator | >= 9.0, < 9.0.0.14 | 9.0.0.14 |
| kaseya virtual system administrator | >= 9.1, < 9.1.0.4 | 9.1.0.4 |
References
- VU#919604 third-party-advisory us-government-resource