CVE-2016-0204 in Cloud Orchestrator

Summary

Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/08/2015
• Disclosure: 10/16/2016
• Moderation: VulDB entry created
• Entries: 1: VDB-92727
• CPE: ready
• CWE: CWE-601 (Confirmed)
• CVSS: 6.8
• EPSS: 0.00160
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0204
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0204
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0204/