CVE-2022-1019 - Vulnerability Details - OpenCVE

Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Automatedlogic	Webctrl Server

Configuration 1 [-]

cpe:2.3:a:automatedlogic:webctrl_server:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf

History

No history.

MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2022-04-19T20:38:25

Updated: 2024-08-02T23:47:43.290Z

Reserved: 2022-03-17T00:00:00

Link: CVE-2022-1019

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-04-19T21:15:13.747

Modified: 2024-11-21T06:39:52.233

Link: CVE-2022-1019

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "WebCtrl Server", "vendor": "Automated Logic", "versions": [{"lessThanOrEqual": "7.0", "status": "affected", "version": "All", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Chizuru Toyama from Trend Micro"}], "descriptions": [{"lang": "en", "value": "Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-04-19T20:38:25", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf"}], "solutions": [{"lang": "en", "value": "Upgrade to the latest supported version of WebCtrl 7.0 \u201cOctober 29, 2020 - cumulative patch\u201d or later."}], "source": {"advisory": "CARR-PSA-2021-01", "discovery": "EXTERNAL"}, "title": "Automated Logic WebCtrl Server Open Redirection Vulnerability", "workarounds": [{"lang": "en", "value": "As a manual work around an administrator can add the CSP header/meta tag to each \u201cindex.htm\u201d file in each of the directories under \u201c<install_dir>/webroot/_common/lvl5/help/*\u201d. These are the main index files for each help for each program/tool and are all web accessible.\nExample would read: <meta http-equiv=\"Content-Security-Policy\" content=\"default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'\">"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "ID": "CVE-2022-1019", "STATE": "PUBLIC", "TITLE": "Automated Logic WebCtrl Server Open Redirection Vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "WebCtrl Server", "version": {"version_data": [{"version_affected": "<=", "version_name": "All", "version_value": "7.0"}]}}]}, "vendor_name": "Automated Logic"}]}}, "credit": [{"lang": "eng", "value": "Chizuru Toyama from Trend Micro"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}]}, "references": {"reference_data": [{"name": "https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf", "refsource": "CONFIRM", "url": "https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf"}]}, "solution": [{"lang": "en", "value": "Upgrade to the latest supported version of WebCtrl 7.0 \u201cOctober 29, 2020 - cumulative patch\u201d or later."}], "source": {"advisory": "CARR-PSA-2021-01", "discovery": "EXTERNAL"}, "work_around": [{"lang": "en", "value": "As a manual work around an administrator can add the CSP header/meta tag to each \u201cindex.htm\u201d file in each of the directories under \u201c<install_dir>/webroot/_common/lvl5/help/*\u201d. These are the main index files for each help for each program/tool and are all web accessible.\nExample would read: <meta http-equiv=\"Content-Security-Policy\" content=\"default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'\">"}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:47:43.290Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2022-1019", "datePublished": "2022-04-19T20:38:25", "dateReserved": "2022-03-17T00:00:00", "dateUpdated": "2024-08-02T23:47:43.290Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:automatedlogic:webctrl_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "55A81F41-2A0C-435F-8EFA-25BCF79073B1", "versionEndIncluding": "7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file."}, {"lang": "es", "value": "Las p\u00e1ginas de \u00edndice de \"Help\" del servidor WebCtrl de Automated Logic versi\u00f3n 6.1, son vulnerables a un redireccionamiento abierto. La vulnerabilidad permite a un atacante enviar una URL maliciosamente dise\u00f1ada que podr\u00eda redirigir al usuario a una p\u00e1gina web maliciosa o descargar un archivo malicioso"}], "id": "CVE-2022-1019", "lastModified": "2024-11-21T06:39:52.233", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 2.7, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-04-19T21:15:13.747", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Mitigation", "Third Party Advisory"], "url": "https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Third Party Advisory"], "url": "https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}