CVE-2022-44488 - OpenCVE

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Adobe	Experience Manager Cloud Service Experience Manager

Configuration 1 [-]

OR	cpe:2.3:a:adobe:experience_manager::::::::
	cpe:2.3:a:adobe:experience_manager_cloud_service::::::::

References

Link	Resource
https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: adobe

Published: 2022-12-19T00:00:00

Updated: 2022-12-19T00:00:00

Reserved: 2022-10-31T00:00:00

Link: CVE-2022-44488

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-12-19T20:15:13.547

Modified: 2022-12-23T18:54:07.437

Link: CVE-2022-44488

JSON object: View

Redhat Information

No data.

CWE

CWE-601

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "7918174C-4288-416D-9DA4-E0CB200E2112", "versionEndExcluding": "6.5.15.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "48171ADC-0898-4427-BECA-3E5D0EAAD8AA", "versionEndExcluding": "2022.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."}, {"lang": "es", "value": "Adobe Experience Manager versi\u00f3n 6.5.14 (y anteriores) se ve afectado por una vulnerabilidad de redireccionamiento de URL a un sitio que no es de confianza (\"Open Redirect\"). Un atacante autenticado con pocos privilegios podr\u00eda aprovechar esta vulnerabilidad para redirigir a los usuarios a sitios web maliciosos. La explotaci\u00f3n de este problema requiere la interacci\u00f3n del usuario."}], "id": "CVE-2022-44488", "lastModified": "2022-12-23T18:54:07.437", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 1.4, "source": "psirt@adobe.com", "type": "Secondary"}]}, "published": "2022-12-19T20:15:13.547", "references": [{"source": "psirt@adobe.com", "tags": ["Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html"}], "sourceIdentifier": "psirt@adobe.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "psirt@adobe.com", "type": "Primary"}]}