Open redirect in mod_auth_mellon - CVE-2021-3639

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU63468

Open redirect in mod_auth_mellon - CVE-2021-3639

Published: May 20, 2022 / Updated: May 20, 2022


Vulnerability identifier: #VU63468
CSH Severity: Low
CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-3639
CWE-ID: CWE-601
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to redirect victims to arbitrary URL.

The vulnerability exists due to improper sanitization of logout URLs in mod_auth_mellon. A remote attacker can create a link that leads to a trusted website, trick the victim to open it and redirect to arbitrary domain.

Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.


Affected software

mod_auth_mellon
Amazon Linux AMI
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
SUSE Linux Enterprise Server
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
Ubuntu
Fedora
libapache2-mod-auth-mellon (Ubuntu package)
mod24_auth_mellon
mod_auth_mellon-diagnostics
mod_auth_mellon
mellon (Red Hat package)
apache2-mod_auth_mellon
apache2-mod_auth_mellon-diagnostics-debuginfo
apache2-mod_auth_mellon-doc
apache2-mod_auth_mellon-diagnostics
apache2-mod_auth_mellon-debugsource
apache2-mod_auth_mellon-debuginfo

How to mitigate CVE-2021-3639

Install updates from vendor's website.

mod_auth_mellon - update to 0.18.0
libapache2-mod-auth-mellon (Ubuntu package) - addressed in versions 0.13.1-1ubuntu0.3, 0.16.0-1ubuntu0.1, 0.17.0-1ubuntu0.21.04.1
mod24_auth_mellon - update to 0.14.0-2.10
mod_auth_mellon-diagnostics - update to 0.14.0-12
mod_auth_mellon - update to 0.14.0-12
mellon (Red Hat package) - update to 0.14.0-12.el8.1
apache2-mod_auth_mellon - addressed in versions 0.16.0-8.6.1, 0.17.0-150200.5.7.1
apache2-mod_auth_mellon-diagnostics-debuginfo - update to 0.17.0-150200.5.7.1
apache2-mod_auth_mellon-doc - update to 0.17.0-150200.5.7.1
apache2-mod_auth_mellon-diagnostics - update to 0.17.0-150200.5.7.1
apache2-mod_auth_mellon-debugsource - update to 0.17.0-150200.5.7.1
apache2-mod_auth_mellon-debuginfo - update to 0.17.0-150200.5.7.1
mod_auth_mellon - addressed in versions 0.18.0-1.fc34, 0.18.0-1.fc35, 0.18.0-1.fc36

External References

Related Security Bulletins