A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Federation Agent version 3.0 was found.
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/98711 | vdb entry third party advisory |
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03737en_us | vendor advisory |
http://www.securitytracker.com/id/1038570 | vdb entry third party advisory |