Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the redirect_url parameter.

Oracle Java Web Console 3.1[_x86].
Date this patch was last updated by Sun : May/14/10

Oracle Java Web Console 3.1.
Date this patch was last updated by Sun : May/14/10

The version of Sun Java Web Console running on the remote host may have a URI redirection vulnerability.  An attacker could exploit this by tricking a user into requesting a specially crafted URL, which would redirect the user to an arbitrary website.  This could result in further attacks (e.g.  phishing).

Sun Java Web Console 3.0.2_x86: Security fixes.
Date this patch was last updated by Sun : Jun/25/09

ID	Name	Product	Family	Severity
107945	Solaris 10 (x86) : 125953-20	Nessus	Solaris Local Security Checks	high
107445	Solaris 10 (sparc) : 125952-20	Nessus	Solaris Local Security Checks	medium
17725	Sun Java Web Console BeginLogin.jsp redirect_url Parameter URI Redirection	Nessus	Web Servers	medium
31599	Solaris 8 (x86) : 136986-03	Nessus	Solaris Local Security Checks	high
27100	Solaris 9 (x86) : 125951-20	Nessus	Solaris Local Security Checks	high
27093	Solaris 9 (sparc) : 125950-20	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2008-5550

medium

Tenable Plugins

high

medium

medium

high

high

high