CVE-2014-8489

medium ForgeRock
CVSS v3 Base Score
6.4
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS Score
0.3%
Exploitation probability in 30 days
Top 51% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
None
Published: December 12, 2014 (4171 days ago)
Last Modified: May 6, 2026
Vendor: ForgeRock
Source: NVD

Description

Open redirect vulnerability in startSSO.ping in the SP Endpoints in Ping Identity PingFederate 6.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the TargetResource parameter.

CWE

NVD-CWE-Other

Affected Products

pingidentity pingfederate

References

🔗 packetstormsecurity.com 🔗 seclists.org 🔗 tetraph.com 🔗 packetstormsecurity.com 🔗 seclists.org