← Database

CVE-2008-0241

MEDIUM CVSS: 5.8 Published: 2008-01-11 Modified: 2026-06-16

Description

Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter.

Affected Platforms

Sun Java System Identity Manager

Weakness Type

CWE-20

References