• info
• discussion
• exploit
• solution
• references

RSA Authentication Agent for Web URI Redirection Vulnerability

To exploit this issue, an attacker must entice a victim into following a malicious URI.

The following example URI is available to demonstrate this issue:

https://www.example.com/WebID/IISWebAgentIF.dll?Redirect?url=ftp://www.example2.com/index.htm