CVE-2008-2027

CVE-2008-2027 describes an open redirect vulnerability in RSA Authentication Agent 5.3.0.258 for Web for IIS, specifically within the WebID/IISWebAgentIF.dll component. This flaw allows remote attackers, particularly when users access the agent via certain browsers like Mozilla Firefox, to redirect them to arbitrary malicious websites through a crafted URL parameter, facilitating phishing attacks. The vulnerability has a CVSS score of 5.8 (Medium), indicating a network-based attack with medium complexity that requires no authentication, potentially leading to partial confidentiality and integrity impacts. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code or Metasploit modules are available. The vulnerability has received no community discussion or media coverage, indicating a lack of widespread attention or exploitation.