RSA Authentication Agent for Web 5.3 - Open Redirection

Author: Richard Brain
type: remote
platform: windows
port: 
date_added: 2008-04-23 
date_updated: 2014-02-17 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/28907/info

RSA Authentication Agent for Web is prone to a remote URI-redirection vulnerability because the application fails to adequately sanitize user-supplied input.

A successful attack may aid in phishing-style attacks.

This issue affects RSA Authentication Agent for Web for Internet Information Services 5.3.0.258. Other versions may also be affected.

https://www.example.com/WebID/IISWebAgentIF.dll?Redirect?url=ftp://www.example2.com/index.htm