CVE-2015-2167 in Drutt Mobile Service Delivery Platform
Summary
Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
03/01/2015
Disclosure
04/06/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 74654 | Ericsson Drutt Mobile Service Delivery Platform 3PI Manager start-3pi-manager.jsp redirect | 601 | Unproven | Unavailable | CVE-2015-2167 |