Opsview Monitor Pro up to 4.5.x/4.6.4/5.0.2/5.1.0 /login back redirect

Summaryinfo

A vulnerability classified as problematic was found in Opsview Monitor Pro up to 4.5.x/4.6.4/5.0.2/5.1.0. This affects an unknown part of the file /login. Executing a manipulation of the argument back can lead to redirect. This vulnerability appears as CVE-2016-10368. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as critical was found in Opsview Monitor Pro up to 4.5.x/4.6.4/5.0.2/5.1.0. This vulnerability affects an unknown function of the file /login. The manipulation of the argument back with an unknown input leads to a redirect vulnerability. The CWE definition for the vulnerability is CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the /login URI.

The bug was discovered 09/01/2016. The weakness was presented 05/03/2017 (Website). The advisory is shared for download at trustwave.com. This vulnerability was named CVE-2016-10368 since 05/03/2017. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1204.001.

The vulnerability was handled as a non-public zero-day exploit for at least 244 days. During that time the estimated underground price was around $0-$5k.

Upgrading eliminates this vulnerability.

See VDB-100827 for similar entry. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Opsview

Name

• Monitor Pro

Version

• 4.0
• 4.1
• 4.2
• 4.3
• 4.4
• 4.5
• 4.6.0
• 4.6.1
• 4.6.2
• 4.6.3
• 4.6.4
• 5.0
• 5.0.0
• 5.0.1
• 5.0.2
• 5.1.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion