CVE-2018-1939 IBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could....
MediumCVSS 6.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 153319.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm cloud private | = 3.1.1 | No fix listed |
References
- 107302 third-party-advisory vdb-entry
- ibm-cloud-cve20181939-open-redirect(153319) vdb-entry vendor-advisory
- www.ibm.com vendor-advisory