CVE-2018-1251 | BDVDB-2026-107481 Detail

Description#

Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect Unity users to arbitrary web URLs by tricking the victim user to click on a maliciously crafted Unisphere URL. Attacker could potentially phish information, including Unisphere users' credentials, from the victim once they are redirected.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-09-28Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.