medium6.8
CVE-2011-3415
Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows re…
Impact
Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 7 | All versions |
| Microsoft | Windows Server 2003 | All versions |
| Microsoft | Windows Server 2008 | All versions Version r2 |
| Microsoft | Windows Vista | All versions |
| Microsoft | Windows Xp | All versions Version sp3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN71256611/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-003557
- http://www.securityfocus.com/bid/51202
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14815
- http://jvn.jp/en/jp/JVN71256611/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-003557
- http://www.securityfocus.com/bid/51202
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14815