CWE Code: 601
Vulnerability Type: privilege_escalation
CVSS Score: 5.8
CWE Name:  URL Redirection to Untrusted Site ('Open Redirect')
Summary: emc rsa archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. a remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. the attacker could then steal the victims' credentials and silently authenticate them to the rsa archer application without the victims realizing an attack occurred.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2017-07-07
Last Modified Date: 2017-07-17
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  URL Redirection to Untrusted Site ('Open Redirect').
user
CWE Code: 601
Vulnerability Type: privilege_escalation
CVSS Score: 5.8
CWE Name:  URL Redirection to Untrusted Site ('Open Redirect')
Summary: emc rsa archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. a remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. the attacker could then steal the victims' credentials and silently authenticate them to the rsa archer application without the victims realizing an attack occurred.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2017-07-07
Last Modified Date: 2017-07-17
assistant