CVE-2015-0624 Open redirect in n/a

Medium 4.3 Published 21 Feb 2015 Updated 6 Aug 2024

Remote attackers can trigger redirects via crafted HTTP headers in Cisco AsyncOS, potentially facilitating phishing attacks.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2015-0624?

CVE-2015-0624 is a medium-severity vulnerability in Cisco Web Security Appliance, published on 21 Feb 2015. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and CSCur89639.

Weakness: CWE-20

Which versions are affected by CVE-2015-0624?

It affects 3 products.

Products include Cisco Content Security Management Appliance, Cisco Email Security Appliance Firmware, Cisco Web Security Appliance.

How do I fix CVE-2015-0624?

No fix has been published for CVE-2015-0624 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-0624 being exploited?

There is no known exploitation of CVE-2015-0624 in the wild and no public exploit code.

All Cisco Web Security Appliance vulnerabilities

Sources

Also known as GHSA-jmg7-7w3x-r8wf.