CVE-2017-8989 is a critical URL Redirection vulnerability affecting HPE IceWall SSO Dfw versions 10.0 and 11.0 on RHEL, HP-UX, and Windows. With a CVSS score of 9.1, this vulnerability allows unauthenticated remote attackers to redirect users to malicious sites, potentially leading to phishing or credential theft. While no public exploits (Metasploit, Nuclei, ExploitDB) are currently available and it's not listed in CISA's KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.0CPE matchmatch criteria | cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:*:*:*:* | ||
11.0CPE matchmatch criteria | cpe:2.3:a:hp:icewall_sso:11.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.