CVE-2019-12783

CVE-2019-12783 is a medium-severity vulnerability affecting Verint Impact 360 version 15.1, specifically within the sign-in redirection mechanism. An attacker can manipulate the 'rd' parameter to redirect users to an arbitrary URL after successful login. When combined with CVE-2019-12784, this flaw enables a "crowdsourced" brute-force attack, allowing threat actors to guess credentials without direct interaction with the target system. The vulnerability has a CVSS score of 6.1, indicating a low impact on confidentiality and integrity, but requires user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.