1. Home
  2. CVE Database
  3. CVE-2022-1019
MEDIUM · 5.2

CVE-2022-1019

Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirec...

Vulnerability Description

Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file.

CVSS Score

5.2

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AutomatedlogicWebctrl Server<= 7.0

Related Weaknesses (CWE)

CWE-601

References

FAQ

What is CVE-2022-1019?

CVE-2022-1019 is a vulnerability with a CVSS score of 5.2 (MEDIUM). Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirec...

How severe is CVE-2022-1019?

CVE-2022-1019 has been rated MEDIUM with a CVSS base score of 5.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-1019?

Check the references section above for vendor advisories and patch information. Affected products include: Automatedlogic Webctrl Server.