Security Advisory

CVE-2014-3739

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-05-20 14:00:00

Last updated 2024-08-06 10:50:18

Assigner mitre

State PUBLISHED

Description

Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the came_from parameter.

← Browse all CVEs View on cve.org ↗