CVE-2015-2167

Published: Apr 6, 2015Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp.

Affected (3)

Products: Ericsson: Drutt Mobile Service Delivery Platform

Ericsson

1 product

Drutt Mobile Service Delivery Platform

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ericsson Drutt Mobile Service Delivery Platform	Version 4.0
Ericsson Drutt Mobile Service Delivery Platform	Version 5.0
Ericsson Drutt Mobile Service Delivery Platform	Version 6.0

References (4)

http://packetstormsecurity.com/files/131230/Ericsson-Drutt-MSDP-3PI-Manager-Open-Redirect.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/73934

Source: cve@mitre.org

http://packetstormsecurity.com/files/131230/Ericsson-Drutt-MSDP-3PI-Manager-Open-Redirect.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/73934

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.