Skip to content
OpenAdvisories
High · 8.3 CVE-2018-1251 EUVD-2018-11884GHSA-j958-56r6-475c

Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauthenticated attacker …

Published Sep 28, 2018 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect Unity users to arbitrary web URLs by tricking the victim user to click on a maliciously crafted Unisphere URL. Attacker could potentially phish information, including Unisphere users' credentials, from the victim once they are redirected.

Affected products

VendorProductAffectedFixed
Dell EMC Dell EMC Unity unspecified – < 4.3.1.1525703027 4.3.1.1525703027
Dell EMC Dell EMC UnityVSA unspecified – < 4.3.1.1525703027 4.3.1.1525703027

References