CVE-2026-115360
説明
A flaw was found in OpenBao. An open redirect vulnerability in the user interface for the OpenID Connect (OIDC) identity provider allows a remote attacker to redirect unauthenticated users to arbitrary, attacker-controlled websites. By convincing a victim to follow a crafted OIDC link, an attacker can facilitate phishing attacks or credential theft.
詳細
This vulnerability is evaluated as Moderate severity because exploitation necessitates tricking a user into navigating an attacker-supplied redirection URL, while having no direct path to compromise stored secrets or execute arbitrary commands. In typical deployments, the OpenBao web interface is disabled by default, requiring intentional administrative enablement to be reachable. Furthermore, OpenBao is not included in Red Hat Enterprise Linux, limiting the overall impact on supported Red Hat platforms.
脆弱性の原因 (CWE) の理解
Access Control
Technical Impact: Bypass Protection Mechanism; Gain Privileges or Assume Identity
The user may be redirected to an untrusted page that contains malware which may then compromise the user's system. In some cases, an open redirect can also enable the immediate download of a file without the user's permission, because the redirection to an external site may lead to endpoints on those sites that automatically trigger a download action ("drive-by download" [REF-1478]). This will expose the user to extensive risk. The user's interaction with the web server may also be compromised if the malware conducts keylogging or other attacks that steal credentials, personally identifiable information (PII), or other important data.
Access Control,Confidentiality,Other
Technical Impact: Bypass Protection Mechanism; Gain Privileges or Assume Identity; Other
By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam. The user may be subjected to phishing attacks by being redirected to an untrusted page. The phishing attack may point to an attacker controlled web page that appears to be a trusted web site. The phishers may then steal the user's credentials and then use these credentials to access the legitimate web site. Because the server name in the modified link is identical to the original site, phishing attempts can appear more trustworthy.
よくある質問
Not sure what something means? Check out our Security Glossary.
エラータ通知の受信を希望しますか? こちらで登録してください。
