Open Redirect Vulnerability in Cisco Registered Envelope Service

CVE-2017-3889 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:N

A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Open Redirect. This vulnerability affects the Cisco Registered Envelope cloud-based service. More Information: CSCvc60123. Known Affected Releases: 5.1.0-015.

Learn more about our Cis Benchmark Audit For Cisco.