title: An open redirect vulnerability exists in CERT/CC VINCE software prior to version 1.50.0
description: An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials.
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
vendor: CERT/CC
product: VINCE - The Vulnerability Information and Coordination Environment
versions:
version: 1.50.0, status: affected, lessThan: 1.50.0, versionType: custom
}