CVE-2022-1019 Automated Logic WebCtrl Server Open Redirection Vulnerability
MediumCVSS 6.1
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Automated Logic WebCtrl Server | <= 7.0 | No fix listed |
| automatedlogic webctrl server | <= 7.0 | No fix listed |
References
- www.corporate.carrier.com mitigation third-party-advisory