We use cookies to ensure that we give you the best experience on our website.  Visit our Privacy Policy to learn more. If you continue to use this site, we will assume that you are okay with it.

Your choices regarding cookies on this site.
Your preferences have been updated.
In order for the changes to take effect completely please clear your browser cookies and cache. Then reload the page.

Werk #6622: Fixed possible open redirect on login page

TitleFixed possible open redirect on login page
Date2018-09-17 20:39:21
Checkmk EditionCheckmk Raw Edition (CRE)
Checkmk Version1.4.0p36,1.6.0b1,1.5.0p5
LevelTrivial Change
ClassSecurity Fix
CompatibilityCompatible - no manual interaction needed

It was possible to redirect an user to external websites through manipulating GET parameters. To exploit this vulnerability, an attacker needs to trick a user into following a crafted URL. The attack only works if the user does not notice that he is redirected to a different URL.